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Exactly  when  did  you  stop 
buying  Wintel  servers 
and  start  collecting  them? 


TsnMatH^  Windows  NT  serve*  usng  PC  NeTbnk.  *  ‘Based  on  comparable  2  to  8-way,  700MH/  configurations  as  of  9/4/01  and  10/16/01  (Dell).  Equrvalent  configurations  of  afl  Dell,  HP  and  IBM  servers  include  Ibe  cost  of  NAS  storag?;  all  compeUbve  8-way  oonfi$jrat)ons  mcfude  the  cost  of  Windows  Datacenter  ©2001  Sun  Microsystems.  Inc.  AH  rights  reserved  Sun.  Sun  Microsystems,  the  Sun  logx  Sun  Tire  and  Solans  are  trademarte  or  rejjsteretl 
he.  in  the  Unrtod  States  and  other  countries  All  SPARC  trademarks  are  used  under  license  and  are  trademark  or  registered  trademark  of  SPARC  International.  Inc.  m  the  United  States  and  other  countries  Products  bearing  SPARC  trademarks  are  based  on  an  architecture  developed  by  Sun  Microsystems  Ire  UNK  s  a  roistered  trademark  in  the  United  States  and  other  countries,  edusivefy  icensed  throu0i  VOpen  Company  Ltd. 


Over  a  dozen  Wintel  servers? 

Or  one  Sun  Fire  V880  server? 

The  servers  keep  piling  up.  You  need 
more  power  to  support  your  enterprise, 
but  each  Wintel  server  adds  to  your 
management  complexity  and  overhead 
costs.  And  consolidation?  Too  expensive. 
Well,  with  the  Sun  Fire™  V880  server 
from  Sun,  our  new  2-  to  8-way,  750MHz 
entry  server,  you  can  afford  to 
consolidate  those  dim-bulb  Wintel 
servers  and  dramatically  reduce  the 
cost  and  complexity  of  your  infrastructure. 
How  good  is  it?  Well,  you  can  consolidate 
more  than  a  dozen  Wintel  servers 
onto  a  single  Sun  Fire  V880  server.’ 
(No,  it's  not  a  typo.) 


Consolidate  with  the 
new  entry  server  that 
costs  up  to 

47%  less 

than  an  NT  server. 


Big  brains  in  a  little  box. 

The  Sun  Fire  V880  server  runs  on 
the  award-winning,  incredibly  stable 
Solaris™  Operating  Environment- rated 
the  #1  UNIX'  OE  by  D.H.  Brown  Associates. 
And  because  it’s  built  to  enterprise-level 
standards  (with  scalability  that  beats 
the  pants  off  any  NT-based  server),  you’ll 
get  increased  system  performance  and 
the  reliability  and  security  that  make  it 
perfect  for  consolidating  your  database, 
mail,  ERP,  e-commerce  or  Web  applications. 
All  in  all,  a  great  enterprise-class  server 
for  your  workgroup. 


Better  Performance,  Better  Price** 


Introducing 
the  New 
Sun  Fire”  V880 
Server 


A  smart  machine 
deserves  a  smart  price. 

The  V  is  for  value,  and  it  shows.  For 
up  to  47%  less  than  a  comparably 
configured  Wintel  server,  the  hardware 
savings  of  the  Sun  Fire  V880  server 
is  just  the  tip  of  the  iceberg.  By 
consolidating  with  the  Sun  Fire  V880 
server,  you’ll  also  save  big  on  adminis¬ 
tration  and  the  software  licensing  fees 
that  come  with  each  and  every  Wintel 
server  you  run.  And  unlike  Windows  NT, 
there  is  no  costly  rebooting  (bet  that 
sounds  good).  This  is  just  the  beginning 
of  a  whole  new  V  series  of  Sun  Fire 
servers  that  brings  you  incredibly  smart 
products  at  competitive  prices. 


Operating  2-way,  4-way,  8-way, 

Environment  4GB  memory,  8GB  memory,  32GB  memory, 

6  disks/36GB  6  disks/36GB  12  disks/36GB 


Sun  Fire  V880 

Proven  Solaris 

$29,995 

$49,995 

$119,995 

Compaq  ML750 

NT 

$45,307 

$66,741 

N/A 

HP  LXr8500 

NT 

$55,261 

$75,471 

$227,192 

IBM  x370 

NT 

$48,305 

$61,635 

$183,851 

Dell  8450 

NT 

$37,260 

$50,940 

$162,987 

With  Sun,  things  are 
simple,  end  to  end. 

By  designing  your  enterprise  around 
Sun  servers,  you  actually  build  in 
simplicity  at  every  level.  That’s  because 
Sun  servers  run  on  the  Solaris/SPARC™ 
architecture,  making  them  compatible 
from  the  smallest  box  to  the  largest 
servers.  Which  means  you  can 
use  the  same  applications,  tools, 
administration  and  resources  up  and 
down  your  enterprise,  radically  cutting 
the  complexity  and  costs  of  your  entire 
infrastructure.  For  more  information 
about  the  Sun  Fire  V880  server,  visit 
an  authorized  Sun  reseller  or  go  to 
www.sun.com/sunfirev880servers. 


YOU'RE  PROTECTED  AGAINST  HACKERS,  VIRUSES  AND  WORMS.- 

BUT  WHAT  ABOUT  ROSE  IN  BENEFITS? 


eTrust  Security  Solutions 

Complete  protection  for  your  entire  enterprise. 


When  it  comes  to  protecting  your  business,  you  need  security  that  can  protect  your 
enterprise  from  potential  threats,  no  matter  where  they  may  come  from.  That's  exactly 
what  eTrust  does.  Our  family  of  products  allows  you  to  not  only  safeguard  your  entire 
enterprise,  but  also  view  and  manage  that  security  either  centrally  or  from  multiple 
delegated  locations.  So  you  can  continue  to  grow  and  maximize  new  opportunities 
while  minimizing  your  risk.  And  that's  security  you  can  feel  secure  about. 


Computer  Associates™ 


HELLO  TOMORROW  WE  ARE  COMPUTER  ASSOCIATES  THE  SOFTWARE  THAT  MANAGES  eBUSINESS"* 


ca.com/etrust 


02001  Computer  Associates  International,  Inc.  (CAI.  Ail  trademarks,  trade  names,  service  marks,  and  logos  referenced  herein  belong  to  their  respective  companies. 
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■  7  Microsoft  stumbles  into  another  security  controversy. 

■  7  Part  2  of  a  series:  MPLS  readies  networks  for  user  boom. 

■  10  Storage  vendors  pushing  InfiniBand,  iSCSI  at  Comdex. 
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■  14  Loudcloud  touts  Web  site  performance  testing  service. 

■  14  New  standard  finally  in  the  works  for  provisioning  software. 

■  16  Venture  funding  in  network  start-ups  keeps  drying  up. 

■  18  Wireless  LANs  to  be  more  workmanlike  than  glitzy  at  Comdex. 

■  18  Check  out  the  new  client  devices  for  your  wireless  LAN. 
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Simply  the  best 

It's  time  again  for  our  annual  Best  Issue,  a  guide  to  winning 
networks,  strategies  and  products.  The  issue  includes: 

•  The  best  tips  for  working  with  IP  technologies, 

•  Profiles  of  the  winning  products  and  services  for  our  annual 
Best  of  the  Tests,  Readers'  Choice  and  Category-breaker  awards. 

•  An  in-depth  case  study  on  Prudential  Financial,  our  2001 
User  Excellence  Award  winner,  and  more ...  all  starting 
on  Page  55. 
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The  new  telework 
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doesn't  have  to  be  difficult. 
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go  it  alone  with  storage. 
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Roaming  depends  on  directories. 
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■  110  'Net  Buzz:  Gryphon 
Networks  stands  to  make  a  bundle 
off  of  "do  not  call"  legislation. 
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The  Best  Issue 

Take  a  look  at  our  online-only  features.  Read  about  "A  hospital's  one-man 
network  band"  and  why  "Network  pros  know  they  have  the  best  job."  See 
who  was  awarded  “User  Excellence  Award”  honorable  mentions. 
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I  Columnists 

Compendium 

Too  much? 

Fusion  Executive  Editor  Adam  Gaffin  gives  us  the  question 
posed  by  writer  Gerry  McGovern:  “Is  e-mail  too  much  of  a 
good  thing?" 

DocFinder:  6845 


Read  how  the  Fed  is  still  viewed  as  resistant  to  telework.  Also,  see  other 
online-only  columns  by  Net.Worker's  Managing  Editor  Toni  Kistner  and 
Columnist  Jeff  Zbar.  DocFinder:  6841 
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Outsourcing 

Check  out  our  updated  research  page  for  all  the  information  you  need 
about  outsourcing  your  network  and  applications,  follow  our  links  to 
primers  and  tutorials,  security  and  fraud  protection,  developing  industry 
standards  and  more.  DocFinder:  6843 
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Try  our  newest  Flash  demo  and  learn  how  to  evaluate  a  product  you've 
been  considering.  Listen  to  audio  advice  from  our  Test  Alliance  experts. 

DocFinder:  6844 


Help  Desk 

Port  filtering 

Ron  Nutter  helps  a  user  set  up  filters  on  Border  Manager. 
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Edge  Columnists  Daniel  Briere  and  Beth  Gage  poke  some 
fun  at  data  local  exchange  carriers,  e-tailers  and  Internet 
start-ups. 
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BUSINESS-CRITICAL 


IT  IS  AN  INDISPUTABLE  FACT  in  the  e-business  world  that 
the  speed  at  which  revenues  flow  from  new  applications  is 
directly  related  to  the  speed  at  which  these  applications  can 
be  deployed.  Quickly  deploying  these  applications  is  the 
cyber-world’s  equivalent  of  rapidly  building  brick-and-mor- 
tar  storefronts  to  capture  new  customers. 

And  because  new  business  applications  can  sometimes  generate  sudden  and 
sustained  bursts  of  increased  business  activity,  the  underlying  network  infra¬ 
structure  must  be  both  scalable  and  full-featured  to  support  the  demands  of 
client  services. 

To  meet  these  and  other  lofty  requirements  of  Internet  business  applications, 
Cisco  Systems  offers  the  Catalyst  6500  Series  platform  for  both  enterprise  and 
service-provider  networks.  In  addition  to  being  the  fastest  switch  series  avail¬ 
able  today,  the  Catalyst  6500  Series  is  designed  from  the  ground  up  to  address 
the  toughest  network  challenges,  including: 

■  High  availability,  performance,  and  scalability 

■  Intelligent  multilayer  switching 

■  Increased  requirements  for  gigabit  switching  density 

■  Voice  and  data  integration 

■  LAN/WAN/MAN  convergence 

PROOF  POSITIVE 

"With  the  recent  introduction  of  the  Cisco  Catalyst  6513,  the  latest  member  of  the 
Catalyst  6500  Series,”  says  Ben  Goldman,  manager,  product  marketing  for  the 
Catalyst  6500  Series,  “Cisco  has  proven  that  we  can  continue  to  scale  bandwidth, 
performance,  and  density  while  maintaining  line-rate  intelligent  services.” 

That’s  been  borne  out  by  independent  lab  tests  of  Cisco’s  Catalyst  6509  and 
Catalyst  6513  switches,  which  showed  stun¬ 
ning  aggregate  throughput  with  equally  stun¬ 
ning  services  enabled  performance.  Test  engi¬ 
neers  from  Princeton,  NJ-based  Miercom,  a 
leading  independent  product  testing  lab,  put 
the  switches  through  a  comprehensive  set  of 
tests  that  included  "abnormally  stressful  tasks 
and  network  failures.” 

Even  under  extreme  duress,  the  Catalyst 
6500  series  switches  delivered  “full  line-rate 
performance  with  low  levels  of  latency  and  no 
packet  loss,  no  matter  how  large  the  packet  in 
the  test.”  By  maintaining  a  consistent  and  low 
level  of  latency,  the  switches'  performance 
clears  a  major  and  business-critical  hurdle  in 
supporting  delay-sensitive  applications,  includ¬ 
ing  IP  telephony  and  video  conferencing. 

When  Miercom's  engineers  configure  the 
Catalyst  6500  Series  switches  with  multiple 

advanced  features,  the  switches  suffered  no  performance  degradation  or 
changes  in  latency.  And  as  shown  in  the  chart,  the  aggregate  throughput  of  each 
switch  equaled  the  theoretical  maximum — better  than  210  Mpps,  for  the 
Catalyst  6513.  (A  complete  report  of  this  stunning  test  is  available  as  a  printable 
PDF  at  www.c1sco.co/r1/go/6500m/ercom). 


Performance, 
scalability,  and 
services  packed  into 
the  Cisco  Catalyst 
6500  Series 


Cisco  Systems  offers  the  Cisco  Catalyst  6500  Series  platform- 
Catalyst  6513  Switch. 


-with  the  latest 


Throughput  to  the  Max 


The  results  shown  are  based  on  testing  with 
64-byte  IP  packets 
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SOURCE:  MIERCOM 


Moreover,  Miercom’s  tests  found  that  the  Catalyst  6500  switches  continued 
to  provide  advanced  services  while  consistently  maintaining  performance  under 
heavy  traffic  loads.  Such  performance  and  service  provisioning  is  vital  for  envi¬ 
ronments  in  which  users  expect  a  switch  to  maintain  peak  performance,  even  if 
it  is  employing  multiple  advanced  features  while  being  hit  with  various  network 
flaps  and  glitches. 

CATALYST  FOR  QUALITY 

The  Catalyst  6500  Series  supports  Cisco  IOS  software,  which  delivers  a  com¬ 
prehensive  suite  of  services  for  managing  network  security,  allocating  and 

enforcing  QoS,  and  enabling  network 
resilience.  Quality  of  service  is  the  lifeblood  of 
Internet  business  applications.  In  its  tests, 
Miercom  simulated  various  system  failures, 
and  each  time  the  Catalyst  switches  posted  the 
“exact  same  results,  confirming  that  common 
logic  failure  has  no  effect  on  QoS  enforce¬ 
ment.” 

“For  today’s  enterprise  and  service  provider 
networks,  it  is  essential  to  have  the  capability 
to  deploy  Internet  business  applications  on  a 
highly  scalable  infrastructure,”  notes  Peter 
Alexander,  vice  president  of  marketing  at 
Cisco’s  Internet  Systems  business  unit.  “The 
Catalyst  6500  Series  is  not  only  scalable,  it  also 
has  the  high  availability  and  key  network  serv¬ 
ices  required  by  today’s  most  demanding  busi¬ 
ness  environments.” 

The  Catalyst  6500  Series  is  a  key  element  of 
the  Cisco  Content  Networking  architecture,  designed  to  deliver  Internet  busi¬ 
ness  applications  including  e-commerce,  supply  chain  management,  and  work¬ 
force  optimization. 

For  more  information  on  the  Catalyst  6500  Series  and  on  Cisco’s  Internet  net¬ 
working  solutions,  click  on  www.cisco.com/go/catalyst6500. 
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Microsoft  stumbles  on  road  to  security 

Recent  bugs  derail  faith  in  software  maker’s  ongoing  initiatives. 

Feeling  vulnerable 


■  BY  JOHN  FONTANA 

MOUNTAIN  VIEW,  CALIF  — 
Despite  what  appear  to  be  its  best 
intentions,  Microsoft  is  again 
stumbling  as  it  tries  to  convince 
network  executives  it  is  serious 
about  security 

Last  week,  at  its  Trusted  Com¬ 
puting  Conference,  the  company 
made  itself  a  lightning  rod  in  an 
old  debate  over  the  responsible 
disclosure  of  code  used  to  ex¬ 
ploit  holes  in  software.  At  the  con¬ 
ference,  Microsoft  and  a  group 
including  @stake,  Guardent  and 
Internet  Security  Systems  drafted 
a  proposal  for  an  industrywide 
code  of  conduct  to  ensure  secu¬ 
rity  vulnerabilities, such  as  worms 
and  viruses,  are  reported  respon¬ 
sibly  and  end  users  are  safe¬ 
guarded  promptly 

But  critics  lashed  out,  writing  a 
competing  proposal  and  saying 
Microsoft  was  hijacking  the  dis¬ 


closure  issue  to  divert  attention 
from  its  own  security  problems. 

Security  has  been  a  touchy  sub¬ 
ject  lately  for  Microsoft.  Two 
weeks  ago,  a  cornerstone  of  its 
.Net  strategy,  the  Passport  authen¬ 
tication  service,  was  found  to 
have  a  flaw  that  could  expose 
credit  card  numbers.  A  week 
before,  Microsoft  issued  a  “criti¬ 
cal"  patch  for  Windows  XP  on  the 
day  the  software  was  released. 
Microsoft  also  recently  has  suf¬ 
fered  through  the  Code  Red  and 
Nimda  attacks  on  its  Web  server 
software,  Internet  Information 
Server  (IIS)  and  its  Outlook 
e-mail  client.  And  to  add  insult  to 
injury,  some  security  patches 
Microsoft  has  issued  recently 
have  caused  systems  to  crash  or 
be  reconfigured  in  such  a  way  as 
to  expose  other  security  vulnera¬ 
bilities  (read  columnist  Mark 
Gibbs’  take  on  Microsoft’s  latest 
security  proposal  on  page  110). 


Microsoft’s  claims  of  making  security  a  high  priority  in  all  its  software  have  been 
tarnished  of  late  by  problems  such  as  those  cited  below: 

Technology 

Problem 

Microsoft  reaction 

Lingering  question 

Passport 

Authentication  software  has 
a  hole  that  could  expose  credit 
card  and  other  personal 
information. 

Patch 

What  other  holes  might 
exist  in  this  software 
touted  for  distributed  user 
authentication? 

Windows  XP 

Vulnerability  in  Universal  Plug 
and  Play  that  could  let  hackers 
slowly  degrade  system 
performance. 

Patch 

With  its  mandate  to  develop 
more  secure  code,  why  would 
Microsoft  need  to  issue  a 
security  patch  on  the  first 
day  of  a  major  release? 

Hotfix  MS01-052 


Patch  forTerminal  Server 
crashed  systems  it  was 
intended  to  fix. 


Reissued  patch, 
altered  patch  testing 
and  release  process. 


Can  other  Microsoft  patches 
be  trusted? 


Ironically  the  scramble  to  patch 
and  repatch  is  coming  in  the 
wake  of  last  month’s  launch  of 
Microsoft’s  Strategic  Technology 
Protection  Program,  the  latest  in 
its  line  of  highly  hyped  security 
programs  to  showcase  Microsoft’s 


commitment  to  secure  software. 

“Right  now  Microsoft  is  in  a  big 
hole  and  is  trying  to  find  its  way 
out,” says  Edward  Livengood,  infor¬ 
mation  security  analyst  for  a  mid¬ 
sized  bank  in  the  Midwest. 

Try  as  it  might,  progress  seems  to 


MPLS  readies  networks  for  user  boom 


■  BY  JIM  DUFFY 

Industry  observers  say  the 
number  of  Internet  users 
could  almost  double  to  600 
million  by  the  end  of  the  de¬ 
cade,  presenting  a  huge  chal¬ 
lenge  to  carriers  looking  to 
guarantee  service  levels  over 
ever-bigger  networks. 

Proponents  of  Multi-protocol 
Label  Switching  (MPLS)  say 
this  technology’s  traffic  engi¬ 
neering  capabilities  can  help 
service  providers  meet  this 
challenge,  ensuring  that  inte¬ 
grated  voice/data,  videoconferencing  and 
other  new  services  receive  the  amount  of 
bandwidth  they  require. 

Traffic  engineering  helps  operators  man¬ 
age  their  networks  better,"  says  Eric  Peterson, 
director  of  protocol  development  for  Uni¬ 
sphere  Networks,  which  makes  MPLSenabled 
edge  routers.  “It’s  intrinsic  to  the  ability  to 
scale  IP  networks.” 

Even  though  wholesale  adoption  of  MPLS 
has  been  slow  (see  Part  1  of  this  series  at 


Second  in  a  three-part  series 


www.nwfusion.com,  Doc- 
Finder:  6748),  those  using  the 
technology  find  traffic  engi¬ 
neering  can  provide  immedi¬ 
ate  benefits. 

Traffic  engineering  refers  to 
the  ability  to  explicitly  steer 
traffic  through  a  routed  or 
switched  network.  In  MPLS, this 
is  accomplished  by  labeling  IP 
packets  with  forwarding  infor¬ 
mation  that  directs  traffic  over 
an  explicit  path  and  forwards  it 
quickly  without  requiring 
routers  to  perform  a  deep 
packet  inspection  at  each  hop. 

MPLS  is  in  contrast  to  routing  with  an  In¬ 
terior  Gateway  Protocol  (IGP),  which  re¬ 
quires  this  deep  packet  inspection  and  for¬ 
wards  packets  based  on  the  constructs  of 
the  particular  IGPbe  it  Routing  Information 
Protocol  (RIP),  Border  Gateway  Protocol  or 
Open  Shortest  Path  First  (OSPF). 

RIP  will  route  based  on  the  least  amount 
of  hops  and  has  a  15-hop  limit.  OSPF  may 
look  for  the  least  expensive  or  higher  band¬ 
width  route. 


These  IGPs  will  use  the  same  route  for  the 
same  destination  IP  address,  unless  a  link  or 
links  in  the  route  fail.  Even  if  the  routes  con¬ 
gested,  the  packets  will  be  sent  to  them. 

By  engineering  traffic  with  MPLS,  service 
providers  say  they  can  build  bigger  networks 
by  making  more  efficient  use  of  otherwise 
underused  links  and  avoiding  the  latency  in¬ 
volved  in  hop-by-hop  packet  inspection. Qua¬ 
lity  of  service  (QoS)  or  service-level  guar¬ 
antees  can  be  ensured  by  explicitly  directing 
traffic  onto  the  fastest,  least  congested  or 
shortest  paths. 

Global  convergence  on  MPLS 

Masergy  Communications,  an  emerging 
global  carrier,  is  using  MPLS’s  traffic  engi¬ 
neering  capabilities  to  scale  its  network  and 
deliver  QoS. 

The  carrier  turned  up  MPLS-based  services 
a  month  ago  that  converge  voice,  video  and 
data  over  a  single  network. 

The  services  include  Internet  access  with 
prioritization  of  the  traffic,  private  point-to- 
point  links  based  on  MPLS,  IP  telephony  and 
IP  video. 

See  MPLS,  page  108 


be  elusive,  as  exemplified  at  last 
week’s  conference.  There,  Micro¬ 
soft  led  the  charge  to  develop  a 
standard  for  evaluating,  fixing  and 
disclosing  security  vulnerabilities, 
but  it  quickly  found  critics.  The 
discussion  hinged  on  a  white 
paper  by  Scott  Culp,  manager  of 
the  Microsoft  Security  Response 
Center,  which  called  on  the  secu¬ 
rity  community  to  stop  full  disclo¬ 
sure  of  exploit  code,  the  recipe  for 
developing  worms  and  viruses. 
Culp  criticized  the  practice,  say¬ 
ing  security  vulnerabilities  should 
be  discussed  but  in  a  “smart,  pru¬ 
dent  and  responsible”  way.  Culp 
said  so-called  “script  kiddies"  use 
the  code  to  attack  servers  and 
e-mail  systems. 

But  critics  say  that  Microsoft  was 
trying  to  divert  attention  from  its 
most  recent  problems  and  that 
full  disclosure  of  exploit  code  can 
help  IT  executives  and  others  fully 
understand  vulnerabilities. 

“This  discussion  was  an  am¬ 
bush.  No  one  was  given  time  to 
devise  a  response,”  says  Russ 
Cooper,  editor  of  the  NT  BugTraq 
Web  site  and  the  surgeon  general 
for  TruSecure.  “The  talk  is  not 
about  responsible  disclosure,  we 
are  talking  about  public  risk.” 
Cooper  responded  by  proposing 
the  creation  of  the  Responsible 
Disclosure  Forum  to  govern  dis¬ 
closure  practices. 

See  Microsoft,  page  108 
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Earley  no  longer  with  AT&T 

■  Network  World  has  learned  that  Kath¬ 
leen  Earley,  former  president  of  data  and 
Internet  services  at  AT&T,  has  retired  from 
the  company  at  age  49.  Earley  was  with 
AT&T  for  eight  years  and  departed  Sept. 

30.  While  she  held  the  title  of  president  for 
at  least  two  years  during  her  tenure, 

Earleys  most  recent  title  was  senior  vice 
president  for  enterprise  marketing.  The 
change  was  attributed  to  an  overall  reorganization  within  AT&T 
by  President  David  Dorman,  who  was  former  CEO  at  Concert. 
John  Polumbo,a  former  Concert  executive,  takes  over  Earley’s  role 
at  the  company 


www.nwfusion.com  | 

Yankowski  out  at  Palm 

■  Just  shy  of  his  two-year  anniversary,  Palm  CEO  Carl  Yankowski  has“decided  to  resign," 
according  to  a  statement  from  the  company.  Palm  Chairman  Eric  Benhamou  will  take 
over  temporarily,  while  heading  an  executive  committee  to  find  a  new  CEO  to  lead  the 
struggling  maker  of  PDAs  and  handheld  computers.Yankowski  s  decision  was  linked  to 
the  final  stages  of  a  move  to  split  Palm  into  two  business  groups, one  focused  on  devel¬ 
oping  and  licensing  the  Palm  OS  software,  the  other  on  taking  that  software  and  devel¬ 
oping  it  into  Palm-branded  handheld  products.The  new  structure  created  a  new  role 
for  the  CEO,  one  that  “no  longer  matches  my  aspirations,”Yankowski  said  in  the  Palm 
statement. 

Insurance  company  suing  KPMG 

■  Health  insurance  company  Highmark  is  suing  KPMG  Consulting  for  what  it  claims 
is  a  failure  to  complete  an  electronic  billing  and  accounts  receivable  system. 
Highmark  says  KPMG,  which  was  chosen  for  the  project  two  years  ago  with  the 
expectation  that  the  database  application  would  be  finished  early  next  year,  com¬ 
pleted  less  than  20%  of  the  project  before  abandoning  it  mid-June.  The  conflict 
between  Highmark  and  KPMG  involves  a  dispute  about  whether  the  first  stage  of  the 
project  was  satisfactorily  completed.  KPMG  was  given  $12.2  million  for  that  work, 
and  Highmark  says  KPMG  asked  for  an  additional  $8  million  in  April,  saying  that 
some  of  the  software  coding  would  have  to  be  redone.  KPMG  says  it  hasn’t  commit¬ 
ted  to  further  stages  of  the  project,  but  stands  ready  to  continue  working  with 
Highmark. 

Schwab  executive  to  become  Staples  CIO 

■  Staples  has  hired  Schwab  Technology  Vice  President  Paul  Gaffney  to  be  its  CIO  start¬ 
ing  Jan.  7.  Gaffney  was  earlier  involved  in  helping  launch  Office  Depot’s  e-commerce 
operation.  Brian  Light,  Staples’  current  CIO,  will  become  executive  vice  president  of 
StaplesDirect.com. 

BMC  to  cut  another  7%  of  workforce 

■  BMC  Software  last  week  announced  it  will  reduce  its  workforce  by  7%,  or  roughly 
475  people.  It  is  the  second  round  of  layoffs  the  company  has  made  this  year.  The 
enterprise  network  and  systems  management  software  maker  employs  about  6,800 
workers  worldwide  and  has  cut  900  jobs  this  year.  BMC  says  it  expects  to  take  a  third- 
quarter,  severance-related  charge  in  the  range  of  $14  million  to  $18  million. 

Lucent  selling  professional  services  unit 

■  Lucent  Technologies  is  putting  its  corporate  professional  services  unit  up  for  sale 

as  it  streamlines  its  operations  to  focus  on  large 
service  providers.  The  struggling  network  infra¬ 
structure  provider  hopes  to  find  a  buyer  by  year- 
end  for  the  corporate  services  portion  of  its 
Lucent  Worldwide  Services  business.  Until  a  sale 
is  completed,  the  company  will  continue  to  work 
with  customers.  The  corporate  services  group 
helps  businesses  design  and  implement  their  net¬ 
works,  recommending  the  best  products  for  the 
job  regardless  of  vendor.  Lucent  will  keep  the 
larger  portion  of  the  services  group  that  is 
geared  toward  large  service  providers.  Lucent 
Worldwide  Services  has  its  roots  in  International 
Network  Services,  which  Lucent  acquired  in 
October  1999. 

Microsoft  touts  early  XP  sales 

■  Early  sales  of  Windows  XP  have  exceeded  those 
of  some  previous  Microsoft  desktop  operating  sys¬ 
tems,  the  company  claimed  last  week,  citing  inde¬ 
pendent  research  figures.Since  the  Oct. 25  release 
of  XP  more  upgrades  and  copies  of  the  software 
have  been  sold  compared  with  the  same  period 
after  the  launches  of  Windows  95  and  Windows 
Millennium  Edition  (ME),  Microsoft  says.  The 
new  operating  system  is  “keeping  pace"  with 
Windows  98,  it  adds.  In  the  three  days  after  the 
official  launch  of  XR  U.S.  retailers  sold  more 
than  300,000  copies  of  the  operating  system, 
according  to  data  from  NPD  Intelect.a  sales  track¬ 
ing  firm  for  the  consumer  electronics  industry 
that  gathers  sales  estimates  from  major  retailers 
and  mail-order  companies.  In  the  comparable 
period,  Windows  ME  recorded  more  than  200,000 
copies  sold,  and  Windows  98  sold  about  400,000 
copies. 


The  Good  The  Bad  The  Ugly 


Cisco,  despite  posting  a  $268  million  fiscal  first- 
quarter  loss  after  taking  acquisition-related  and  other 
charges  into  account,  cheered  industry  watchers  by  showing 
an  increase  in  revenue  from  the  previous  quarter.  That  was 
Cisco's  first  sequential  quarterly  revenue  increase  in  three  quar¬ 
ters,  possibly  a  sign  the  company  is  bouncing  back  from  the 
first  real  slump  in  its  history. 

The  Powerpuff  Girls  —  cartoon 

heroines  Blossom,  Bubbles  and  Buttercup  — 
have  met  their  biggest  challenge  yet.  Their  new 
“Meet  the  Beat  Alls"  DVD  from  Warner  Bros,  has 
been  recalled  because  it  is  infected  by  the 
FunLove  virus,  which  can  infect  files  on  a  PC's 
hard  drive  and  network  directories.  > 

Hewlett-Packard  and  Compaq 

last  week  tried  to  shore  up  their  planned  merger  by 
announcing  that  most  members  of  HP's  board  of 
directors  support  the  deal.  But  the  tough  sell  of  an 
acquisition  received  a  couple  more  blows  last  week  when  heirs  of  HP  co-founders  William  Hewlett  and  David 
Packard  said  they  oppose  the  deal.  They  said  the  combination  would  result  in  too  many  layoffs  and  that  it 
would  focus  HP  too  much  on  increasingly  unprofitable  businesses  such  as  PCs  and  low-end  servers.  The  heirs, 
and  foundations  associated  with  them,  control  about  7%  of  HP’s  stock. 
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Defrag  Commander. 
Making  other  defraggers 

obsolete. 


Don’t  settle  for  yesterday’s  technology. 
Defrag  Commander  is  the  fastest,  most 
thorough  and  cost-effective  defrag  tool 
around.  It  manages  the  defragmentation  of 
all  your  networked  Windows*  computers 
from  a  single  system,  eliminating  costly 
client  software  installations  and  end-user 
support  headaches.  Move  up  to  the  new 
enterprise  defrag  solution  —  then  sit  back, 
relax  and  have  a  cup  of  coffee. 


•  Faster  and  more  thorough  defragmentation 

•  Network-wide  defragging  from  a  single  system 

•  No  client  software  installation 

•  Easier  to  install,  manage  and  support 

•  Certified  for  Microsoft  Windows  2000  Server 

•  Costs  a  fraction  of  other  defraggers 


Try  Defrag  Commander  FREE  for  30  days!  Download  it  at  www.winternals.com/33, 
or  call  toll  free  1-800-237-5138  for  more  information  and  enterprise  pricing. 
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Vendors  tout  InfiniBand,  iSCSI  wares 


■  BY  DENI  CONNOR 

LAS  VEGAS  —  Storage  vendors 
at  Comdex  this  week  will  show 
off  gear  they  say  is  necessary  for 
faster,  more  efficient  network  and 
storage  infrastructures. 

Among  the  announcements: 

•  InfiniCon,  an  InfiniBand  stor¬ 
age  start-up,  is  previewing  a  multi¬ 
protocol  device  for  InfiniBand, 
Ethernet  and  Fibre  Channel  nets. 

•  Storage  vendor  JNI  is  rolling 
out  InfiniBand  adapters  for  server 
clustering  and  attachment  of  stor¬ 
age  devices. 

•  Adaptec  is  unveiling  iSCSI  and 
Fibre  Channel  over  IP  storage  and 
faster  network  adapters. 

InfiniCon  will  preview  its  first 
product, a  multiprotocol  device 
that  acts  as  a  gateway  between 
InfiniBand-based  servers  and 
Ethernet  devices;  as  a  bridge 
from  InfiniBand  servers  to 
Fibre  Channel  storage  equip¬ 
ment;  and  as  an  InfiniBand 
switch  for  clustering  groups  of 
servers.  It  is  expected  to  ship 
early  next  year. 


a  COMDEX 
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InfiniBand  is  a  2.5G  bit/sec, 
point-to-point  server  intercon¬ 
nect  technology  that  lets  multi¬ 
ple  I/O  devices  make  requests 
for  data  of  the  system  CPU  at 
the  same  time  without  delays  or 
congestion.  It  is  an  alternative 
to  slower,  more  congested  serial 
bus-based  technologies,  such 
as  the  Peripheral  Component 
Interconnect  and  Extended 
PCI,  which  handle  only  one 
request  at  a  time. 

“The  whole  idea  is  these  com¬ 
ponents  are  a  migratory  ap¬ 
proach  to  native  InfiniBand,” 
says  James  Gruener,  an  analyst 
with  The  Yankee  Group,  who 
says  InfiniBand  will  gather 
steam  between  now  and  2004. 
“Today’s  servers  in  the  next  few 
years  will  be  able  to  take 
advantage  of  host  bus  adapters 
that  understand  InfiniBand  and 
can  communicate  with  an 


InfiniBand  switch  and  eventu¬ 
ally  InfiniBand  devices  that  are 
on  the  network.” 

Users  need  InfiniBand  to  re¬ 
lieve  bus  congestion  and  in¬ 
crease  an  applications  access  to 
memory  Network  managers  will 
most  likely  install  InfiniBand 
servers,  switches  and  adapters  in 
Internet  data  centers  where  the 
technology  will  cluster  servers  to 
increase  computational  power, or 
in  database  operations  that  are 
I/O-intensive. 


James  Gruener 

The  Yankee  Group 

JNI,  an  established  maker  of 
Fibre  Channel  adapters,  will 
expand  that  line  by  unveiling  two 
InfiniBand  adapters. 

The  InfiniStar  IBP-lx02  2.5G¬ 


bit/sec  dual-port  adapter  is  a  one- 
channel  device  that  will  connect 
PCI-based  servers  into  clusters 
used  to  run  high-availability, trans¬ 
action-intensive  applications. 

The  second,  the  InfiniStar  IBP- 
4x02  dual-port  adapter,  operates 
at  10G  bit/sec  and  will  be  used 
to  connect  servers  to  up  to  four 
storage  devices.  Both  will  be 
available  in  the  first  quarter  of 
2002  for  $2,500  and  $3,500, 
respectively. 

Adaptec  is  launching  three 


adapters  —  one  that  handles  the 
transfer  of  SCSI  storage  data  over 
Ethernet,  one  that  off-loads  TCP/ 
IP  processing  from  the  server  and 
one  that  can  be  used  to  bridge 


storage-area  networks  (SAN). 

The  ASA-721 1  iSCSI  Adapter  is 
installed  on  a  server  and  lets 
file-oriented  and  block-level 
storage  data  be  transferred 
over  an  IP  network.  The  7211  is 
also  one  of  the  first  adapters 
that  removes  TCP/IP  processing 
from  the  server  CPU,  thus 
increasing  performance. 

Observers  estimate  that  offload¬ 
ing  TCP/IP  reduces  CPU  work  by 
half.  Adaptec’s  implementation 
puts  TCP/IP  processing  in  hard¬ 
ware  rather  than  software,  in¬ 
creasing  performance  by  an 
additional  30%,  according  to  the 
company 

The  ANA-7211  TCP/Offload 
Adapter  processes  the  TCP/IP 
stack  and  resides  in  the  net¬ 
work  server,  letting  the  server 
reserve  CPU  cycles  for  applica¬ 
tions  such  as  Web  serving  or 
caching. 

The  ASR-7500  FCIP  Adapter  is 
used  to  bridge  SANs  together 
so  they  can  communicate  with 
each  other  or  create  fault-toler¬ 
ant  disaster-recovery  sites.  ■ 


k  k  Today’s  servers  in  the  next  few  years  will  be 
able  to  take  advantage  of  host  bus  adapters 
that  understand  InfiniBand ...  91 


EMC,  Compaq  unite  on  storage  management 

Deal  shows  EMC  is  trying  to  shed  its  proprietary  image. 


■  BY  DENI  CONNOR 

HOPK1NTON,  MASS.  —  An  agreement 
EMC  announced  with  Compaq  last  week 
should  let  customers  use  the  same  soft¬ 
ware  to  manage  high-end  storage  products 
from  both  companies.  But  it  appears  that 
customers  who  want  to  use  one  package 
to  manage  storage  hardware  from 
EMC  and  vendors  other  than 
Compaq  might  not  get  so  lucky 
any  time  soon. 

Its  deal  with  Compaq  is  EMC’s 
latest  move  to  shed  a  reputation 
for  being  overly  proprietary,  as  the 
company  has  been  forced  to 
change  its  ways  in  light  of 
increased  competition  and 
tighter  IT  budgets.  By  exchanging 
APIs  with  one  another,  EMC  and 
Compaq  can  supply  users  with 
software  for  managing  their 
respective  Symmetrix  and 
Storage  Works  Modular  Array  gear 
—  which  together  accounts  for 
two-thirds  of  such  products  sold 
in  the  market  The  companies  are 
also  expected  to  expand  the 
agreement  to  cover  their 
midrange  storage  gear. 

“The  good  news  for  everybody 
is  major  storage  players  are  play¬ 


ing  nice,  and  the  ultimate  winner  will  be 
clients,”  says  Tony  Prigmore,  an  analyst  for 
consultancy  Enterprise  Storage  Group. 

While  customers  can  do  basic  monitor¬ 
ing  of  mixed  vendor  storage  environments 
today  with  SNMP  tools,  they’ve  had  to 
resort  to  separate  tools  for  each  vendor’s 
devices  to  perform  more  sophisticated 


management,  such  as  making  changes  to 
equipment  or  initiating  data  replication. 

The  EMC-Compaq  deal  relies  on  middle¬ 
ware  dubbed  WideSky  that  EMC  an¬ 
nounced  a  few  weeks  ago  (www.nwfu 
sion.com,  DocFinder:  6848).  Originally  it 
appeared  the  WideSky  APIs  would  be 
available  to  any  company  through  EMC’s 
developer’s  program. 
But  EMC  has  since  said 
that  only  makers  of  sim¬ 
ilar  storage  hardware 
willing  to  swap  APIs 
can  get  their  hands  on 
WideSky. 

“Our  position  on  this 
will  be  exactly  parallel 
with  what  we  did  with 
Compaq  —  we  are  will¬ 
ing  to  do  API  swaps  for 
like-functionality”  says 
Don  Swatik,  vice  pres¬ 
ident  for  global  alli¬ 
ances  at  EMC.  “It’s  ab¬ 
solutely  critical  for 
other  storage  compa¬ 
nies  not  only  to  have  a 
willingness,  but  also  to 
have  substance  in  their 
APIs.  In  the  past,  other 
organizations  have  had 
nothing  to  trade.” 


Sun  says  that  it  attempted  to  swap  APIs, 
but  was  rebuffed.  EMC  says  Sun  was 
allowed  to  evaluate  software  and  the  two 
companies  started  to  exchange  APIs,  but 
negotiations  broke  down  when  Sun  could 
not  provide  APIs  for  its  StorEdge  9900  array. 
Sun,  which  posts  the  APIs  for  its  midrange 
T-3  storage  products  on  its  Web  site,  says  its 
agreement  with  Hitachi  Data  Systems,  the 
manufacturer  of  the  StorEdge  9900,  does 
not  permit  Sun  to  disclose  those  APIs 
(sources  say  that  Hitachi  and  EMC  may  be 
trying  to  work  out  an  API  swap). 

Meanwhile,  IBM  executives  say  the  com¬ 
pany’s  Tivoli  Storage  Manager  products  are 
written  to  open  standards  such  as  SNMP 
However,  IBM  also  uses  special  instructions 
called  channel  control  words  to  manage 
the  advanced  functions  of  its  Enterprise 
Storage  Server  (code-named  Shark).  IBM 
would  not  disclose  which,  if  any  vendors  it 
has  licensed  these  instructions  to. 

Hewlett-Packard  says  it  is  willing  to 
share  code  with  other  vendors  as  they 
request  it,  but  has  not  formalized  any¬ 
thing  with  EMC. 

Observers  say  EMC’s  WideSky  could,  if 
distributed  openly,  become  a  de  facto  stan¬ 
dard  given  EMC’s  market  leadership.  In  the 
past,  EMC  has  made  an  SNMP  manage 
ment  information  base  for  Fibre  Channel 
switches  available  to  others.  ■ 


Interoperability  deal 


EMC  and  Compaq  are  swapping  APIs  that  will  let  each 
offer  software  that  manages  storage  hardware  from 
both  vendors. 


EMC  will  give  Compaq 
APIs  for  managing  its 
high-end  Symmetrix 
and  midrange  Clariion 
gear. 

Compaq  will  join  EMC’s 
E-Infostructure 
Developer's  Program. 

Compaq  will  give  EMC 
APIs  for  managing  its 
high-end  and  midrange 
StorageWorks  arrays. 


Compaq's  Enterprise 
Virtual  Array 


EMC's  Symmetrix 
8830 


How  fast  can  I  deploy  your  critical  apps  from  Microsoft,  i2  and  SAP? 
How  fast  can  you  plug  me  in? 
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Dell  |  Enterprise 

I  am  Dell  Enterprise.  PowerEdge™  servers,  storage,  infrastructure  software,  and  Premier  Enterprise  Services. 

And  I  not  only  run  the  critical  apps  your  enterprise  demands,  I  make  sure  they  scream  from  day  one.  How?  By  creating 
alliances  with  leading  software  companies  like  Microsoftf  \2f  and  SAP.  And  by  creating  a  one-to-one  relationship  with  you. 
The  result:  a  custom,  end-to-end  Intel®  Pentium®  III  Xeon™  processor-based  solution  designed  to  deliver  maximum  uptime. 
Pre-validated  and  pre-configured  to  your  exact  specs.  Then  pre-tested  and  proven  before  it  leaves  the  factory. 

When  critical  is  the  name  of  the  game,  I  can  play  as  fast  as  you  can  plug.  To  find  out  what  customers  and  analysts 
are  saying  about  Dell  Enterprise,  visit  us  online  today  at  dell.com/enterprise3. 


Rapid  deployment.  Maximum  uptime.  Easy  as 
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Microsoft  .NET  Platform  Call  1-877-430- DELL  or  visit  www.dell.com/enterprise3 

i2  TradeMatrix  Platform 
mySAPcom  e-business  Platform 
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More  intrusion-detection  options  emerge 


IDS  survey 


About  half  of  IT  managers  polled  say  they  have  yet  to  make 
a  decision  to  purchase  an  intrusion-detection  system 
(IDS),  although  none  have  evaluated  one  and  rejected  it. 

Are  you  using  an 
intrusion- 
detection 
system? 


SOURCE  BASED  ON  AN  IDC  REPORT;  POLL  OF  983  CORPORATIONS  AND  GOVERNMENT  AGENCIES. 


■  BY  ELLEN  MESSMER 

A  handful  of  established  secur¬ 
ity  vendors  and  start-ups  this  week 
are  parading  a  range  of  new  intru¬ 
sion-detection  systems  that  will 
broaden  the  choices  in  vulnera¬ 
bility-assessment  tools  and  net¬ 
work  security  monitoring. 

Symantec  is  upgrading  host- 
based  vulnerability-assessment 
software  called  Enterprise  Secur¬ 
ity  Manager  (ESM)  to  receive  live 
updates  from  the  Symantec  Web 
site  when  new  vulnerabilities 
affecting  any  of  55  different  op¬ 
erating  systems  —  including 
Linux,  NetWare,  Windows  NT/ 
2000/XP  and  Unix  —  are  discov¬ 
ered.  A  product  Symantec  ac¬ 
quired  when  it  purchased  Axent 
last  year,  ESM  previously  had  to 
be  updated  manually.  With  auto¬ 
matic  updating  in  ESM  5.5, which 
ships  this  week, Symantec  will  be 
matching  competitors  BindView 
and  Internet  Security  Systems 
(1SS),  whose  tools  already  sup¬ 
port  automatic  updates. 

“A  vulnerability-assessment  tool 
is  only  as  good  as  the  last  time 
you  updated  it,”  says  Ronald  Van 
Geijn,  a  Symantec  product  man¬ 
ager.  ESM  includes  a  manage¬ 


ment  console  that  keeps  track  of 
vulnerabilities  detected  in  up  to 
2,000  servers  or  workstations.  ESM 
agent  software  has  to  be  installed 
on  the  hosts  to  enforce  security 
policy  for  password  and  file  use, 
and  report  to  the  ESM  manager. 

Pricing  starts  at  $2,000  for  the 
manager  console,  while  server 
agent  software  costs  $  1 ,000  and 
workstations  $100  each.  Syman¬ 
tec  says  future  releases  will  in¬ 
clude  ESM  agents  for  Oracle, 
DB2  and  SQL  Server  databases, 
Check  Points  Fire  Wall-1  and 
Cisco  routers. 

New  York  start-up  Application 
Security  launches  this  week  with 
a  network-based  scanning  tool 
called  AppDetective  for  Oracle, 
which  can  locate  Oracle  servers 
within  a  network  and  pinpoint 
security  vulnerabilities  through 
penetration  testing. 

The  tool,  which  runs  on  Win¬ 
dows  NT/2000,  costs  $200  per 
device  scanned. 

Application  Security  is  also 
working  on  application-layer 
scanners  for  Lotus  Notes,  SQL 
Server  and  Exchange.  The  start¬ 
up  is  competing  against  Net¬ 
work  Associates  with  its  Cyber¬ 
cop  product  and  ISS  with  its 


Internet  Scanner. 

Another  start-up, security  consul¬ 
tancy  Foundstone,  is  branching 
out  into  penetration  testing  by 
providing  a  hosted  application  to 
test  Web  applications,  particularly 
those  used  for  e-commerce.  With 
the  service  called  FoundScan, 
Foundstone  will  compete  against 
ISS.Qualys  andVigilante, which  all 
offer  hosted  services  for  scanning 
e-commerce  applications  and  de¬ 


vices  such  as  firewalls. 

“[FoundScan]  is  looking  for  the 
highest-risk  problems,  those  easy 
to  exploit  and  that  grant  adminis¬ 
trative  access,”  says  Dave  Cole, 
Foundstone’s  director  of  man¬ 
aged  security  services. 

Running  comprehensive  scans 
can  be  time-consuming  if  the  tool 
has  to  look  for  every  known  vul¬ 
nerability,  Cole  says.  Selective 
scanning  allows  the  process  to  be 


Cisco  taps  security  services  partners 


Security  services  lineup 

Cisco  has  11  new  partners  in  the  carrier  and  integration 
services  areas  to  deliver  managed  VPN  and  security 
services  based  on  Cisco  gear. 


• 

AT&T 

•  Inflow 

• 

Ubizen 

• 

Broadwing 

•  SBC 

• 

Unisys 

• 

Cervalis 

Communications 

• 

Veritect 

• 

EXENET 

•  Sprint 

• 

XO  Communications 

■  BY  PHIL  HOCHMUTH 

SAN  JOSE  —  Cisco  last  week  an¬ 
nounced  1 1  new  service  provider 
partners  for  delivering  managed 
security  services  to  companies 
that  want  outside  help  in  securing 
their  networks. 

These  services,  such  as  managed 
VPNs,  intrusion-detection  and 
managed  firewalls,  could  help 
companies  guard  their  networks 
against  internal  or  external  hack¬ 
ing,  and  establish  secure  site-to-site 
VPNs  without  having  to  increase  staff  costs  for 
network  deployment  and  management. The 
new  list  of  carriers  and  integration  firms  gives 
companies  a  broader  choice  for  deploying 
managed  security  services  with  Cisco  gear. 

Launched  in  February  with  eight  partners, 
Ciscos  managed  security  services  program 
now  includes  large  carriers  and  systems  inte¬ 
grators  such  as  AT&T,  Sprint  and  Unisys  (see 
chart  for  full  list).  The  new  providers  will  be 
designated  as  certified  to  sell  and  manage 
security  services  based  on  Cisco  products. 

OuLsourced  intrusion-detection  services  are 
being  used  by  VoteHere,  an  online  voting  ser¬ 
vice,  which  offers  a  Web  site  for  conducting 
private  online  elections,  such  as  corporate 


board  votes  and  union  elections.  The  Belle¬ 
vue,  Wash.,  company  plans  to  expand  into 
local  and  state  government  elections  next 
year,  which  makes  securing  electronic  elec¬ 
tion  data  from  hackers  an  imperative,  says 
Scott  Axworthy,  vice  president  of  IT. 

"We’re  a  potential  hacking  target  from  every 
side:  the  good  guys  trying  to  prove  if  'Net  vot¬ 
ing  is  ready  for  prime  time  or  the  bad  guys 
who  have  reason  to  compromise  an  election,” 
he  says. 

VoteHere  went  with  one  of  the  new  Cisco- 
based  service  providers,  Cervalis,  which  moni¬ 
tors  VoteHere  s  Cisco  network  for  patterns  that 
might  signal  an  intrusion  or  denial-of-service 
attack.  Leaving  security  concerns  to  Cervalis 


lets  the  50-person  company  con¬ 
centrate  on  other  things. 

“We  really  want  to  focus  on  the 
application  security  of  our  prod¬ 
uct  and  the  parts  we  know  best,” 
Axworthy  says.  “As  for  our  net¬ 
work,  we  need  it  to  be  monitored 
24-7;  we  don’t  have  the  resources 
or  staff  to  do  that.”  And  the  $5,000 
per  month  the  company  pays  for 
Cervalis’  service  is  much  less 
than  a  trained  full-time  network 
security  expert  would  com¬ 
mand,  he  adds. 

Managed  security  services  involve  the  instal¬ 
lation  of  Cisco  customer  premise  equipment 
and  the  remote  monitoring  and  management 
of  the  CPE  by  the  provider. 

For  VPNs,  Cisco  VPN-enabled  routers  and  re¬ 
mote  access  equipment  are  installed  on  a  cus¬ 
tomer’s  site  setting  up  encrypted  tunnels  over 
the  Internet  to  link  remote  sites  or  users. 

An  intrusion-detection  system  service  would 
have  Cisco  IDS  software  agents  running  on 
customer  servers  and  monitored  by  a  service 
provider.  A  Cisco  IDS  hardware  appliance 
could  also  be  deployed.  For  managed  firewall 
services,  P1X  firewalls  are  installed  at  a  cus¬ 
tomer  site,  with  management  and  monitoring 
of  the  device  handled  by  the  provider.  ■ 


accomplished  in  a  “reasonable 
time  frame.” 

The  FoundScan  service  costs 
$5,000  to  $20,000.  Rhonda  Mc¬ 
Lean,  Bank  of  America’s  senior 
vice  president  for  corporate  in¬ 
formation  security, says  the  bank 
has  started  using  the  FoundScan 
service  to  get  “a  continuous  and 
complete  picture” of  the  security 
of  its  computing  resources. 

According  to  a  poll  of  almost 
1,000  information-technology  ma¬ 
nagers  conducted  by  research 
firm  IDC,  about  half  have  begun 
using  intrusion-detection  systems, 
while  the  rest  are  kicking  the  tires 
on  the  ever-growing  number  of 
products  and  hosted  services  for 
vulnerability  assessment  and 
monitoring  (see  graphic). 

Johns  Hopkins  University  uses 
ISS’  network-based  RealSecure  to 
monitor  its  large  intranet,  which 
includes  more  than  100  Cisco  Cat¬ 
alyst  switches,  for  signs  of  suspi¬ 
cious  activity  from  either  intrud¬ 
ers  or  university  users  attempting 
unauthorized  activities. 

But  Johns  Hopkins  lead  engi¬ 
neer  Alan  Wilkins  says  he  has  to 
link  together  four  RealSecure  IDS 
monitors  via  Top  Layer  Networks’ 
load-balancing  switch  AppSafe  to 
ensure  all  IP  packets  are  inspect¬ 
ed.  That’s  because  one  ISS  moni¬ 
tor  alone  can’t  deal  with  more 
than  200  megabits  of  traffic  at  one 
time.  AppSafe  also  handles  load 
balancing  for  firewalls,  Web  server 
traffic  management  and  Remote 
Authentication  Dial-In  User  Ser¬ 
vice  access-control  devices. 

“The  way  th&e  IDS  vendors  like 
ISS  and  NFR  designed  their  prod¬ 
ucts  is  a  sore  point  with  network 
architects,”  Wilkins  says.  “A  single 
IDS  probe  will  drop  half  the  data.” 
As  a  consequence,  the  traffic  isn’t 
run  through  the  IDS  at  all. 

This  week, Top  Layer  is  releasing 
an  appliance  designed  specific¬ 
ally  for  the  load  balancing  of  net¬ 
work-based  IDS.  Next  year  Top 
Layer  plans  to  ship  a  second  pro¬ 
duct,  called  Attack  Mitigator,  for 
alerting  managers  to  denial-of-ser¬ 
vice  attacks  and  filtering  out  at¬ 
tack  traffic. 

Top  Layer’s  IDS  Balancer,  with 
12  Fast  Ethernet  connections, 
costs  $12,000;  with  two  Gigabit 
Ethernet  and  12  Fast  Ethernet 
connections,  $20,000.  Attack 
Mitigator  will  start  at  $9,000  for 
four  to  eight  Fast  Ethernet  con¬ 
nections  or  $13,000  for  two 
Gigabit  and  12  Fast  Ethernet 
connections.  ■ 


RETURN  ON  COMMUNICATIONS 


Fact:The  sales  department  has  different  needs  than 
HR.  Or  manufacturing.  Or  customer  service.  And  they 
all  need  to  be  on  your  network.  But  it’s  not  enough  to 
build  a  network  just  to  run  everyone’s  apps.You  need 
one  that’ll  do  so  without  causing  you  massive 
headaches.  And  that  will  return  your  investment. 

Short  and  long  term. 


That’s  where  AT&T  comes  in.  We  know  complex 
networks.  We  know  reliability.  And  we  know  results. 
Proof?  For  Steelcase,  we  put  30  factories  and  16,000 
employees  on  a  single  North  American  network,  speeding 
up  customer  service  and  saving  hundreds  of  thousands 
of  dollars  a  year. 

Want  similar  returns?  AT&T  can  help  you  get  them. 


Call  AT&T  toll  free  at  I  866  636-0807  or  visit  us  at  www.attbusiness.com/return 


©2001  AT&T. 


AT&T 


14 


Id ;  11/12/01 

News 

-  -  -i - r-  -  --  - 

www.nwfusion.com 

NetScreen  automates  VPN  policy  mgmt. 


■  BY  TIM  GREENE 

SUNNYVALE,  CALIF  —  For 
users,  updated  management  soft¬ 
ware  from  NetScreen  Technol¬ 
ogies  promises  to  automate 
tedious  configuration  tasks  while 
reducing  the  possibility  of  human 
error  in  setting  up  VPN  policies. 

NetScreen’s  Global  Pro  3.0  soft¬ 
ware  makes  it  possible  for  cus¬ 
tomers  to  designate  firewall  and 
VPN  policies  for  NetScreen  gear 
via  option  boxes  displayed  on 
the  management  console.  Com¬ 
mands  to  implement  these 
choices  are  then  sent  automati¬ 
cally  to  each  affected  device. 

Other  VPN  vendors,  such  as 
SonicWall  and  Check  Point 


Software,  have  simplified  and 
automated  their  platforms  to 
better  manage  large  VPNs  (see 
related  story,  page  21).  Other 
vendors,  such  as  Solsoft,  are 
writing  similar  software  to  man¬ 
age  equipment  made  by  multi¬ 
ple  vendors. 

“Without  this  automation,  if  you 
have  10  sites  and  you  add  an 
11th,  you  have  to  [reconfigure] 
each  one.  It  takes  on  a  life  of  its 
own,”  says  Martha  Young,  research 
director  for  Enterprise  Manage 
ment  Associates. 

Automating  policy  changes 
means  they  take  effect  sooner, 
which  can  be  critical  if  corpora¬ 
tions  shut  down  offices  and 
need  to  revoke  network  access 


rights  immediately  to  avoid  secu¬ 
rity  breaches  by  terminated 
employees, Young  says. 

Global  Pro  3.0  software  comes 
loaded  on  a  Sun  Netra  server. 
When  another  NetScreen  fire¬ 
wall/VPN  gateway  is  added  to  a 
network,  it  can  be  assigned  to  a 
group  that  shares  a  policy  profile. 
By  virtue  of  that  group  assign¬ 
ment,  Global  Pro  configures  the 
gateway  and  then  notifies  its 
peers  to  accept  it. 

This  saves  time  and  requires  less 
technical  expertise, both  of  which 
mean  savings,  says  Gregson  Siu, 
CTO  of  Alliente,  a  Colorado 
Springs  company  that  procures 
business  supplies  for  other  busi¬ 
nesses.  The  company  manages 


between  20  and  30  NetScreen 
gateways  with  Global  Pro. 

While  streamlining  configura¬ 
tion,  Global  Pro  3.0  also  can  cre¬ 
ate  custom  views  of  monitored 
data,  including  information  gath¬ 
ered  about  attempts  to  hack  into 
a  VPN.  Global  Pro  filters  alerts  so 
security  administrators  see  alerts 
about  potential  attacks,  while 
network  administrators  might 
want  to  see  the  status  of  VPN 
connections. 

NetScreen  also  has  a  stripped- 
down  version  of  its  manage¬ 
ment  software  called  Global  Pro 
Express.  It  manages  up  to  100 
devices,  while  the  full  Global  Pro 
version  handles  up  to  10,000. 
The  Express  version  lacks  tem¬ 


plates  for  reports  and  interfaces 
to  other  management  platforms 
such  as  Hewlett-Packard  Open- 
View. 

NetScreen  has  also  made 
changes  to  the  client  software 
that  runs  on  remote  PCs  that  want 
to  access  a  VPN.  It  now  down¬ 
loads  users'  policies  each  time 
they  log  on  and  purges  them 
when  they  log  off. This  makes  the 
VPN  more  secure  because  poli¬ 
cies  are  not  stored  on  remote 
machines. 

Global  Pro  Express  costs  $6,000 
vs.  $20,000  for  the  full  version. 
They  are  available  Nov.  26.  The 
new  client  software  will  be  avail¬ 
able  Jan.  15. 

NetScreen:  www.netscreen.com 


Loudcloud  touts  Web  site  testing 


Online  shopping  stampede 

Shoppers  are  expected  to  head  online  en  masse,  and 
Web  sites  need  to  be  ready.  Here’s  what  Nielsen/ 
NetRatings  predicts: 

Online  spending  (in  billions) 

Dollars  spent  online 
this  holiday  season 
are  expected  to 
nearly  double  from 
last  year. . . 
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Online  shoppers  (in  millions) 
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...  as  more  people  will 
take  advantage  of  the 
ease  of  shopping 
online. 


27%  increase 


Nov.  -  Dec.  2000  Nov.  -  Dec.  2001 


(Estimates  based  on  Nielsen/NetRatings  and  Harris  Interactive 
eCommercePulse’s  monthly  online  shopping  survey  of  35,000  Internet  users.) 


■  BY  JENNIFER  MEARS 

SUNNYVALE,  CALIF  —  Busin¬ 
esses  that  want  to  take  some  of  the 
guesswork  out  of  preparing  for  the 
online  holiday  shopping  rush  can 
get  some  help  from  managed  ser¬ 
vice  provider  Loudcloud. 

The  company  is  offering  its  Web 
site  performance  testing  service  to 
help  businesses  gauge  how  much 
traffic  their  current  Web  site  con¬ 
figurations  can  handle  and  what 
changes  need  to  be  made  to 
ensure  traffic  spikes  don’t  mean 
downtime  and  lost  sales. 

“If  a  site  fails  or  is  too  slow,  cus¬ 
tomers  can  easily  take  their  busi¬ 
ness  elsewhere,"  says  Jim  Dimi- 
triou,  senior  vice  president  of 
client  services  for  Loudcloud. 

“There  are  things  [about  perfor¬ 
mance]  that  enterprises  don’t 
know  and  that  are  going  to  bite 
them. The  smart  thing  to  do  is  to 
test  it.” 

Other  service  providers,  such  as 
Euclid  in  San  Jose,  also  offer  test¬ 
ing  services.  Companies  with  an 
online  retail  site  should  consider 
using  such  services,  analysts  say 

“Last  year  at  this  time,  in  early  December,  eBay 
went  down  for  11  or  so  hours,”  says  Carrie  Lewis, 
an  analyst  with  The  Yankee  Group.  “They  lost  a  lot 
during  that  time.  During  the  month  of  December, 
utilization  rates  tend  to  go  up.  So  companies  that 
may  be  doing  something  in-house  may  not  be 
prepared  for  a  surge  in  demand. The  cost  of  [Web 
servers]  going  down  at  any  time  is  expensive.  But 
this  time  of  year  in  particular,  it’s  a  bad  time  not  to 
be  available.” 

The  Loudcloud  service  is  available  not  only  as  part 
of  a  package  of  services,  but  also  as  a  stand-alone 


offering  for  companies  that  are  managing  their  sites 
themselves,  Dimitriou  says. 

Loudcloud  uses  tools  such  as  Mercury  Interactive’s 
LoadRunner.as  well  as  proprietary  technology, to  fer¬ 
ret  out  weak  links  and  other  problem  areas. 

Loudcloud  will  then  recommend  a  fix  such  as 
reconfiguration,  adding  capacity  or  redoing  the 
entire  site.  Customers  can  make  their  own  changes 
or  Loudcloud  can  implement  the  improvements, 
Dimitriou  says. 

The  service  is  available  now  and  is  priced  on  a  per- 
project  basis. 

Loudcloud:  www.loudcloud.com 


Standard  in  the  works  for 
provisioning  software 

■  BY  JOHN  FONTANA 

A  standards  body  has  formed  a  group  to  develop  an  XML-based 
framework  that  will  let  IT  executives  integrate  provisioning  systems 
used  to  automatically  assign  and  revoke  user  access  rights  to  internal 
and  external  network  resources. 

The  Organization  for  the  Advancement  of  Structured  Information 
Standards  (OASIS)  last  week  formed  the  Provisioning  Services 
Technical  Committee.The  group  will  hold  its  first  meeting  this  week.  It 
will  develop  the  Provisioning  Services  Markup  Language,  which  would 
create  a  common  data  format  for  exchanging  data  with  and  among 
provisioning  software. 

“The  standard  could  be  used  to  integrate  provisioning  data  within  a 
company,  between  an  [application  service  provider]  and  its  cus¬ 
tomers,  or  in  a  trading  network  with  multiple  partners,"  says  Phil 
Schacter.an  analyst  with  The  Burton  Group/Enterprises  are  interested 
in  this  because  it  helps  tackle  single  sign-on  and  provides  consolidat¬ 
ed  password  management.” 

Provisioning  is  the  process  of  automatically  granting  and  revoking 
access  rights  to  network  resources.  For  example,  a  person’s  name 
entered  into  a  human  resources  database  would  start  a  process  that  ere 
ated  other  accounts  such  as  email,  database  and  application  access. 
The  process  can  dramatically  cut  user  management  costs.  Working  in 
reverse,  it  also  guarantees  that  employees  who  leave  a  company  don’t 
become  a  security  risk. 

The  provisioning  market  is  expected  to  reach  $1  billion  by  next  year, 
according  to  JP  Morgan  Securities.  However,  the  industry  has  been 
plagued  by  disputes  over  protocols. 

Market  leaders  Business  Layers 
and  Access  360  have  competing 
data  models  for  provisioning  sys¬ 
tems.  Business  Layers  plans  to  sub¬ 
mit  to  OASIS  its  Active  Digital 
Profile  Initiative.  Access  360  will 
submit  its  Extensible  Resource 
Provisioning  Management  specifi¬ 
cation,  and  JamCracker  will  submit 
its  Information  Technology  Markup 
Language. 

The  committee  hopes  to  have  a 
working  draft  of  the  specification 
within  six  months.  ■ 


More  online! 


Read  more  about  some  of  the  key  players 
in  the  provisioning  market  and  get  links  to 
breaking  security  news. 
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Information  is  useless  if  you  can’t  use  it  in  time.  Which  means 
your  people  in  the  field  need  the  same  resources,  and  the  same 
access,  that  they  have  back  at  headquarters.  How  do  you  give  it 
to  them?  By  turning  each  employee  into  a  walking  branch  office. 
AT&T  can  make  it  happen. Were  experts  in  setting  up  secure 
remote-access  solutions.  Whether  your  people  are  across  town. 
Or  across  the  planet. 

Want  an  example?  Today,  we  provide  Web  and  Audio 


Conferencing  Services  for  GTECH,  a  global  IT  company 
servicing  the  lottery  industry.  Now  its  4,600  employees  can 
send  messages  or  data,  access  key  documents,  or  share 
applications  from  any  location  in  43  different  nations.  Result: 
GTECH  makes  decisions  faster,  and  jumps  on  opportunities 
in  real  time. 

Want  to  keep  your  people  close  (even  when  they’re  not)? 
Get  in  touch  with  AT&T. 


Call  AT&T  toll  free  at  I  866  636-0807  or  visit  us  at  www.attbusiness.com/return 
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Venture  funding  keeps  drying  up 


Where  the  money  went 

Optical  networking  dominated  venture  capital  investments  in  03. 


Company 

Location 

Amount 

raised 

Description 

PhotonEx 

Maynard,  Mass. 

$90  M 

Optical  network  equipment 

Agility  Communications 

Santa  Barbara,  Calif. 

$88  M 

Optical  network  components 

NuVox  Communications 

Chesterfield,  Mo. 

$87M 

Integrated  communications  services 

Masergy  Communications 

Irving, Texas 

$57.4M 

Customer-controlled  network  services 

Chorum  Technologies 

Richardson, Texas 

$55M 

Optical  network  gear 

Metro-Optix 

Santa  Clara 

$54M 

Optical  network  gear 

AcceLight  Networks 

Pittsburgh 

$50M 

Photonic  switching  technology 

Allegro  Networks 

San  Jose 

$50M 

Edge  routing  devices 

Rhapsody  Networks 

Fremont,  Calif. 

$50M 

Networked  storage  devices 

Integral  Access 

Chelmsford,  Mass. 

$45M 

Multiservice  access  systems 

Navini  Networks 

Richardson, Texas 

$45M 

Broadband  wireless  network 

For  an  extended  chart,  go  to  www.nwfusion.com,  DocFinder:  6853 


■  BY  CAROLYN  DUFFY  MARSAN 

Like  floodwaters  receding  after 
a  storm,  venture  capital  invest¬ 
ments  in  network  start-ups  con¬ 
tinued  to  decline  during  the  third 
quarter  to  the  lowest  levels  since 
1998.  And  industry  experts  pre¬ 
dict  further  evapora¬ 
tion  this  fall, as  the  U.S. 
economy  heads  into 
its  first  recession  in  a 
decade. 

Altogether,  venture 
capital  firms  poured 
$3.5  billion  into  378 
network  start-ups  dur¬ 
ing  the  third  quarter,  according 
to  data  from  Pricewaterhouse- 
Coopers  and  VentureOne  com¬ 
piled  for  Network  World.  Among 
the  hottest  areas  for  investment 
were  optical  network  compo¬ 
nents  and  systems,  IP  storage 
devices  and  broadband  wireless 
services. 

While  more  than  half  of  all  ven¬ 
ture  funding  went  to  network 
start-ups,  investments  in  these 
companies  were  down  30%  from 
the  previous  quarter,  with  the 
number  of  deals  dropping  16%. 

The  decline  is  sharper  when 
compared  with  the  third  quarter 
of  2000.  Since  then,  funding  for 
network  start-ups  is  down  78.5% 
and  deal  making  is  down  60%. 

Venture  capital  investment  in 
network  start-ups  has  declined  for 
six  quarters  in  a  row,  from  a  pin¬ 
nacle  of  $20.5  billion  reached  in 
the  first  quarter  of  2000. 

For  the  third  quarter  of  2001, 
funding  was  down  at  all  stages  — 
from  seed  and  first-round  invest¬ 


ments  to  third  and  fourth  rounds 
—  and  in  all  categories  of  the  net¬ 
work  industry  Hardest  hit  were 
Web-based  software  applications 
and  services  geared  toward  cor¬ 
porate  IT  buyers. 

“The  declines  in  these  sectors 
are  due  to  the  fact  that  corporate 
America  continues  to 
cut  back  on  its  IT 
spending,”  says  Tracy 
Lefteroff,  global  man¬ 
aging  partner  of  the 
venture  capital  prac¬ 
tice  at  Pricewater- 
houseCoopers. 

Dire  straights? 

Nonetheless,  experts  say  the 
situation  is  not  dire.  Despite  the 
declines,  2001  has  already  sur¬ 
passed  1998  in  terms  of  the 
amount  of  venture  capital 
invested  in  network  start-ups. 
And  some  observers  predict 
2001  will  end  up  with  twice  the 
1998  investment  level  of  $10.8 
billion. 

It’s  unclear  how  low  the  venture 
capital  market  will  go,  especially 
after  the  Sept.  1 1  attacks.  Experts 
do  not  anticipate  a  turnaround 
until  the  middle  of  next  year,  and 
that  could  be  delayed  if  there  is 
additional  terrorist  activity 

But  some  venture  capital 
firms  are  already  seeing  an 
uptick  in  entrepreneurial  activ¬ 
ity  after  Sept.  11.  Marco  Rubin, 
managing  director  of  Monu¬ 
mental  Venture  Partners,  says 
deal  making  dropped  off  dra¬ 
matically  in  September  but 
picked  up  again  in  October. 

“We’ve  made  four  investments, 


and  we’ll  soon  bring  that  to  six,” 
Rubin  says.  Monumental  Ventures 
recently  invested  in  Telverse 
Communications,  a  start-up  offer¬ 
ing  hosted  IP  PBX  services  to  car¬ 
riers  and  enterprise  customers. 
Telverse  is  seeking  another  $15 
million  in  its  second  round, 
which  closes  next  March. 

Telverse  CEO  Matt  Collier  is 
optimistic  that  he  will  raise  the 
money  because  the  company’s 
service  offers  significant  cost- 
savings  for  end  users  over  buy¬ 
ing  and  maintaining  an  IP  PBX. 
Five  companies,  including 
WorldCom  and  AOL  Time 
Warner,  are  testing  the  service, 
which  will  be  available  by  the 
end  of  the  year. 

“For  good  business  plans,  the 


market  is  fine,”  Collier  says. 

While  Telverse  is  looking  for 
$15  million,  the  average  deal  size 
for  the  third  quarter  was  $9.3 
million,  down  slightly  from  $11.2 
million  in  the  previous  quarter. 

The  largest  deal  of  the  quarter 
was  a  $90  million  investment  in 
PhotonEx,  a  Maynard,  Mass., 
maker  of  optical  networking 
gear.  In  fact,  half  the  top  10  deals 
of  the  quarter  involved  optical 
networking,  which  saw  steady 
investment  in  an  otherwise 
falling  market. 

PhotonEx  CFO  Pat  Scannell 
says  the  company  was  able  to 
close  the  largest  deal  of  the 
quarter  —  and  one  of  the  largest 
deals  of  the  year  —  by  bringing 
the  prospective  customers  for  its 
40G  bit/sec  photonic  systems 
together  with  its  investors. 

“We  had  our  investors  talk 
directly  to  our  perspective  cus¬ 
tomers  [about]  their  appetite  for 
our  technology  and  what  they 
thought  about  the  value  proposi¬ 
tion,”  Scannell  says. 

Optical  looks  good 

Industry  observers  say  the  out¬ 
look  for  optical  network  start-ups 
such  as  PhotonEx  is  upbeat 
because  of  the  growing  demand 
for  bandwidth. 

“We’re  in  a  portion  of  the 
market  that  still  offers  the 
largest  opportunity  to  offer 
lower-cost  systems  to  the  carri¬ 
ers,”  says  Arlon  Martin,  vice 
president  of  marketing  at  Agil¬ 
ity  Communications,  an  optical 
components  manufacturer  that 


raised  $88  million  last  quarter. 
“If  there’s  anything  that  the  car¬ 
riers  need,  it’s  systems  that 
lower  their  capital  and  operat¬ 
ing  expenses.” 

“The  whole  networking/com¬ 
munications  space  is  going  to  be 
the  place  to  be  in  the  next  five  to 
10  years,”  Lefteroff  says.  “A  lot  of 
the  large  carriers  still  have  sig¬ 
nificant  amounts  of  upgrading 
to  do  to  their  networks,  even 
though  activity  may  have  slowed 
in  the  short  run  because  they’re 
trying  to  conserve  cash.” 

Lefteroff  points  out  that  ven¬ 
ture  capitalists  have  raised 
between  $35  billion  and  $50  bil¬ 
lion  that  is  not  yet  committed. 
“That  bodes  well  for  venture 
capital  investing  in  the  next  12 
to  24  months,”  he  adds.  ■ 


\  I  / 


■  THIS  WEEK'S  QUESTION: 

“Blackcomb"  is  a 
code  name  for  a 
future  version  of 
what  technology? 

Answer  tfis  and  nine  additnnal  questions 
online  and  you  could  win  $500!  Visit 

Netwtrk  World  Fusion  and  enter  2349 
to  the  Search  &ox. 

www.nwfusion.com 
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RETURN  ON  COMMUNICATIONS 


Knowledge  in  your  supply  chain:  It  can  be  a  source  of 
income  or  aggravation,  depending  on  how  seamlessly  your 
network  works  with  others. 

That’s  where  AT&T  comes  in.  We  know  network  integration. 
And  we  know  how  to  make  complex  supply  chains  work. 
Want  proof?  For  Safelite  Auto  Glass  we  link  over 
500  salespeople  with  more  than  60  insurance  companies, 


675  retail  stores,  80  warehouses  and  3,000  mobile  vans. 
So  Safelite  secures  vital  insurance  claim  information 
quickly,  and  keeps  track  of  2.6  million  customers  a  year. 
Which  shows  that  the  right  investment  in  your 
communications  gives  you  returns  worth  shouting  about. 
Need  to  make  your  network  a  better  communicator? 
Talk  to  AT&T. 


Call  AT&T  toll  free  at  I  866  636-0807  or  visit  us  at  www.attbusiness.com/return 
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News 


Wireless  LANs  to  get  up  to  speed  at  show 


■  BY  JOHN  COX 

LAS  VEGAS  —  The  introduc¬ 
tions  surrounding  high-speed 
wireless  LAN  products  at  Com¬ 
dex  this  week  will  have  more  the 
feel  of  a  tailgate  party  than  a  for¬ 
mal  coming-out  event. 

While  Microsoft  was  expected 
to  make  a  glittery  debut  Sunday 
with  its  Tablet  PC  software  plat¬ 
form  (see  story,  below),  most  of 
the  new  technology  will  be 
aired  through  hands-on  demon¬ 
strations  on  the  show  floor. 

Intel,  Proxim  and  TDK  will  be 
among  the  companies  unveiling 
or  previewing  wireless  LAN  base 
stations,  network  interface  cards 
(NIC)  and  other  devices  based 
on  the  802.11a  standard.  The 
802.1  la  standard  supports  use  of 
the  5-GHz  radio  band  and  band¬ 
width  of  54M  bit/sec  —  five  times 
that  of  todays  802.1  lb  products. 

Vendors  will  demonstrate  how 
some  of  their  products  will  even 
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handle  video  and  other  multime¬ 
dia  applications,  as  well  as  file 
transfers  that  would  choke  exist¬ 
ing  802.1  lb  products. 

The  chief  802.11a  drumbeater 
this  week  will  be  the  Wireless 
Ethernet  Compatibility  Alliance 
(WECA),  a  trade  group  that  will 
host  a  number  of  demonstra¬ 
tions  at  its  booth.  WECA  tests  for 
compatibility  among  wireless 
LAN  products,  granting  them  the 
“Wi-Fi”  brand  when  they  pass 
muster.  The  group  recently  said 
the  brand-name  for  the  5-GHz 
products  will  be“Wi-Fi5,”and  test¬ 
ing  will  start  early  next  year. 

Product  parade 

Intel  will  release  its  Pro/Wireless 
5000  LAN  products,  which  were 
first  announced  on  Sept.  11.  This 


product  suite  includes  network 
access  points  (or  base  stations), 
adapters  for  notebooks  and  desk¬ 
top  PCs,  and  a  mini-PC  adapter 
for  handheld  devices.The  NICs  let 
client  devices  network  with  each 
other  in  what  are  called  ad  hoc 
networks,  or  link  with  an  access 
point,  which  can  be  connected  to 
a  wired  LAN. 

Proxim  will  round  out  its  high¬ 
speed  wireless  LAN  portfolio  by 
releasing  the  Harmony  802.11a 
access  point.  In  October,  Proxim 
released  a  NIC  for  client  devices 
with  a  32-bit  CardBus  slot.  The 
company  will  also  tout  proprie¬ 
tary  code  that  can  boost  band¬ 
width  to  about  100M  bit/sec. 

TDK  is  taking  a  similar  tack 
with  CardBus  and  mini-PCI  cards 
that  support  the  802.11a  max¬ 
imum  of  54M  bit/sec,  but  have  a 
special“turbo  mode” that  jumps  it 
to  72M  bit/sec. 

At  least  two  vendors,  Agere  Sys¬ 
tems  and  Cisco,  may  not  be  show¬ 


ing  full-blown  802.11a  products, 
but  they  will  be  talking  up  what’s 
in  the  works.  Cisco  will  give  users 
tips  on  securing  their  wireless  net¬ 
works  and  announce  that  it  is 
strengthening  its  Aironet  wireless 
LAN  security  offering.The  compa¬ 
ny  is  awaiting  5-GHz  chipsets 
from  its  Radiata  subsidiary 

Agere,  a  Lucent  spinoff,  will  lay 
out  its  802.1  la  roadmap  and  an¬ 
nounce  free  software  that  en¬ 
hances  security  for  users  of  its 
current  ORiNICO-based  wireless 
LAN  products. The  company  will 
also  display  its  AP-2000  wireless 
LAN  access  point,  which  is  de¬ 
signed  to  let  802.11b  users  mi¬ 
grate  to  802.11a. 

One  key  feature  of  the  AP-2000 
is  its  use  of  the  Windows  XP  oper¬ 
ating  system,  with  built-in  support 
for  the  advanced,  wireless  securi¬ 
ty  features  found  in  the  draft  IEEE 
802.1  lx  standard. 

Chipping  away  at  prices 

While  802.1  la  nets  will  have  an 
obvious  speed  edge  over  existing 
wireless  LANs,  price  may  also  be 
a  consideration. 

NICs  are  expected  to  sell  for 
$180  to  $230,  which  means  com¬ 
panies  can  buy  wireless  LANs  that 
are  five  times  as  fast  as  todays  for 
only  about  twice  the  price. 

“That’s  why  we  think  the  market 
is  going  to  shift  to  [802.1  la]  LANs 
[from  802.11b  LANs]  pretty 
quickly,” says  Rich  Redelfs,CEO  of 
Atheros,the  only  chipmaker  ship¬ 
ping  802.11a  chipsets  in  quantity 
That  will  change  soon,  and  the  in¬ 
creased  number  of  chip  sources 
should  contribute  to  competitive 
802.1  la  product  prices. 

Intersil,  the  dominant  chip- 
maker  in  the  802.1  lb  market, an¬ 
nounced  in  June  that  it  will  start 
shipping  samples  of  its  54M-bit/- 
sec  Indigo  chipset  by  year-end. 

Another  chipmaker,  Resonext 
Communications,  also  plans  to 
begin  shipping  samples  of  its 
802.1  la  chipset  by  year-end. 

Chip  vendors  are  vying  to  pack 
more  features  into  their  chips, 
streamline  on-chip  processes  to 
make  them  faster  and  simpler, 
and  cut  power  demands.They  are 
also  trying  to  boost  performance 
and  range  by  tweaking  antennas, 
and  by  improving  on-chip  signal 
quality  and  the  Media  Access 
Control-layer  code. 

Market  research  firm  1DC  ex¬ 
pects  802.1  la  to  catch  on  fast, sur¬ 
passing  802.1  la  in  sales  by  2004, 
when  the  market  is  expected  to 
hit  $2.7  billion.  ■ 


IWireless  LANs  could  be  in  your  hands  soon 


What  good  are  wireless 
LANs  without  client  de¬ 
vices  to  exploit  them?  A 
slew  of  vendors,  including  Micro 
soft,  this  week  will  announce 
newfangled  options. 

Microsoft  this  week  is  un¬ 
veiling  a  version  of  Windows 
XP  called  XP  Tablet  PC  Ed¬ 
ition,  which  hardware  ven¬ 
dors  are  expected  to  use 
in  products  they  will  roll 
out  next  year.  The  ma¬ 
chines  will  run  existing 
Windows  programs  and 
new  applications  de¬ 
signed  for  the  Tablet 
operating  system. 

A  key  new  technol¬ 
ogy  is  “rich  digital 
ink,”  which  lets  appli¬ 
cations  recognize 
handwritten,  digital 
ink  notes,  store 
these  as  documents, 
search  them  and  combine 
them  with  other  tools  including 
Microsoft  Outlook. 

Tablet  PC  software  initially  will  support 
802.11b  wireless  LANs  and  eventually  will  work 
with  802.11a  and  Bluetooth  networks. 

National  Semiconductor  will  show  off  the 
capabilities  of  its  Geode  mobile  processor  by 
unveiling  an  innovative  prototype  handheld, 
called  the  Origami  Mobile  Communicator  (see 


graphic,  left). 

Named  for  the  Japa¬ 
nese  art  of  paper  fold¬ 
ing,  the  Origami  can 
be  twisted  and  turned 
into  eight  gadgets  in¬ 
cluding  a  digital  cam¬ 
era,  videophone,  Web 
surfing  pad  and  an 
e-mail  terminal.  It's 
powered  by  the  Geode 
SC3200  processor 
with  integrated  video 
and  audio  compo¬ 
nents,  and  runs  an 
embedded  version  of 
XP.  Observers  say 
such  Internet  appli¬ 
ances  don’t  have  a 
good  track  record 
with  companies  such 
as  3Com  and  Sony 
killing  off  high-profile 
offerings  earlier  this 
year.  Still,  there's  hope. 

“The  Origami  is  one 
of  the  more  innovative 
examples  combining 
next-generation  technologies  with  the  Internet 
appliance  platform,"  says  Tim  Bajarin,  president 
of  Creative  Strategies,  a  consulting  firm. 

National  Semi  hopes  to  see  Origami  built 
next  year. 

—  Network  World  and  IDG  News  Service 
staff  contributed  to  this  story. 


Origami  unfolded 

National  Semiconductor’s 
Origami  prototype  packs 
eight  devices  into  an  8-inch 
by  4-inch  package  that 
weighs  less  than  a  pound.  It 
links  to  the  Web  via  an  802.11b 
(soon  via  802.11a)  or  Blue¬ 
tooth  wireless  cards. 

Software:  Windows  XP, 
Internet  Explorer  6.0, 
Windows  Media  Player. 

Peripherals:  USB, 
CompactFlash  ports. 

Screen:TFT  liquid 
crystal  display. 

Functions  include:  digital 
camera,  videophone,  Web 
surfing  pad,  e-mail  terminal. 
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All  entrants  will  receive  a 
FRE  APC  Service  Provider  Kit 


Be  one  of  the  first  100  to  mail  or  fax  this  completed 
coupon  or  contact  APC  and  enter  to  win  a  FREE 
APC  Multiple  Outlet  Rack-mounted  strip!  All  entrants 
will  receive  a  FREE  APC  Service  Provider  Kit.  Better  yet, 
enter  today  at  the  APC  Web  site! 
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http://promo.apc.com  C798y 
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What  type  of  availability  solution  do  you  need? 
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Legendary  Reliability' 


"Our  customers  feel  good  about N 
the  fact  that  we  use  APC." 


CLEC 


ISP 


COLOCATION 


ASP 


WEB  HOSTING 


CABLE  MSO 


IXC 


BridgePoint  International ,  Inc. 


Why  is  APC  the  best  choice  for  colocation  and  ISP  protection? 


INFORMATIONWEEK 

100 


APC  was  named  to  the  2000 
InformationWeek  500  ranking  of 
the  top  IT  innovators  (09/11/00). 


APC's  customer  service  is  the  way  customer  service 
is  supposed  to  be:  fast,  personal  and  efficient.  It 
is  the  same  way  we  treat  our  own  customers.  We 
consider  APC  a  valuable  member  of  our  team  and 
a  critical  factor  in  our  continued  success. " 


DC  Power  Solutions  from  APC 
Telecommunications/ISP 


DC  Power  Systems  design/installation 

DC  rectifiers  and  power  shelves  with 
advanced  efficiency,  power  density 
and  temperature  range  performance 


FREE  APC  Multiple  Outlet  Rack-mounted  strip  for  the 

first  100  entrants!  All  entrants  will  receive  a  FREE  APC  Service  Provider  Kit! 
To  order:  Visit  http://promo.  ape.  com  Key  Code  c798y  •  Call  888-289-APCC  x21 62  •  Fax  401-788-2797 


APC's  award-winning  technology  and 
industry  leadership  continues  to  set 
the  standard  in  power  protection 
solutions.  APC's  services  and 
array  of  products  —  from 
surge  suppressors,  UPSs, 
cables  and  racks,  to  3-phase 
UPSs  and  DC  power  systems 
—  are  why  industry 
leaders  like  BridgePoint 
place  their  power  avail¬ 
ability  needs  in  the 
capable  hands  of  APC. 


"BridgePoint  International  Inc.  is 
a  leader  in  the  area  of  colocation 
centers.  Our  company  provides 
telehousing  centers  for  equip¬ 
ment  and  value-added  network 
services.  Our  clients  include 
Internet  Service  Providers, 
telecommunications  service 
providers  and  technology  com¬ 
panies  who  wish  to  leverage 
the  power  of  information  rich, 
high-speed  telecommunications 
networks.  In  order  to  provide  our 
customers  with  maximum  security  and 
protection,  we  invest  in  a  system  infra¬ 
structure  that  is  'bulletproof  and 
always  available. 


Basic  Requirement  Reliable  Power 

"We  approached  Symetrix,  an  APC 
Power  Specialist  in  the  Montreal, 
Quebec  area.  When  building  the 
colocation  centers,  redundancy, 
scalability  and  zero  downtime 
were  our  main  requirements. 


High  Availability  with  Low 
Implementation  Costs 

"We  initially  installed  APC's  SymmetraP 
Power  Arrafs  at  each  site.  We  equipped 
each  Symmetra  with  the  APC  accessories 
needed  for  remote  monitoring  of  alarms 
and  environmental  conditions.  The 
potential  savings  in  future  service 
costs,  due  to  Symmetra's 
user-sen/iceability,  really 
interested  us. 


"Once  the  colocation  rooms  had  been  established, 
we  needed  to  ensure  that  our  telecommunications 
service  would  be  available  at  all  times.  Only  a 
state-of-the-art  UPS  system  could  provide  us  with 
the  security  and  peace  of  mind  we  require.  APC's 
Silcon  3-phase  UPS  solution  was  the  perfect  answer 
for  our  application. 

HVAC  and  DC  Add  Peace  of  Mind 

"We  have  recently  installed  APC's  new  DC  power 
plant  and  NetworkAIR  air  conditioning  solutions 
into  our  sites.  APC  was  able  to  provide  us  with 
a  complete,  end-to-end  solution,  saving  us  time 
and  money. 
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BridgePoint 

INTERNATIONAL 


Marcel  Matteau,  Vice  President 

Engineering  &  Operations 
Colocation  Services 
BridgePoint  International,  Inc. 


Let  APC's  Legendary  Reliability™  work  for 
you  as  it  has  for  over  10  million  customers, 
worldwide.  Whether  you're  an  ISP,  ASP,  or 
colocation  provider  like  BridgePoint,  APC 
provides  high  availability  solutions  for  your 
power  protection  needs.  Contact  APC  today! 


Legendary  Reliability" 


APC  is  a  proud  sponsor  of  the  Colocation  & 
Hosting  Association  and  a  member  of 
the  Internet  Service  Providers'  Consortium 
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The  lowest  TCO 
in  the  storage  industry? 

EMC,  FYI. 


We’re  doing  more  than  anyone  else  in  the  industry  to  lower  the 
Total  Cost  of  Ownership  of  storage  infrastructure. 


To  see  actual  case  studies  that  show  how  we’re  accomplishing 
that,  check  out  www.EMC.com/goodnews 


EMC2 

where  information  lives 


www.nwfusion.com 


Takes 


■  Compaq  said  last  week  it  would 
offer  users  its  own  high-end  storage 

box  instead  of  IBM’s  Shark  Enter¬ 
prise  Storage  System.  For  more 
than  a  year  the  companies  have 
collaborated  in  the  storage  market, 
with  IBM  selling  Compaq's  MA8000 
midlevel  storage-area  network  prod¬ 
uct  and  Compaq  offering  IBM's 
Shark  system.  The  firms  decided  to 
end  their  storage  pact  earlier  this 
week  and  instead  rely  on  products 
developed  in-house,  www.compaq. 
com;  www.ibm.com 

■  For  users  who  access  their  S/390 
mainframes  via  Novell's  discontinued 
NetWare  for  Systems  Application 
Architecture  (SAA)  mainframe  con¬ 
nectivity  software.  ICOM  Informa¬ 
tics  has  announced  special  pricing  on 
its  Winpass  TNserver.  WinpassTN- 
server  gives  users  on  TCP/IP  LANs 
access  to  IBM  390-class  hosts.  Win- 
pass  TNserver  connects  thousands  of 
TCP/IP  sessions  to  one  or  many  IBM 
physical  units  via  Synchronous  Data 
Link  Control  and/or  802.2  Logical  Link 
Control  protocol.  Supporting TN3270 
in  standard  and  extended  mode,  Win- 
pass  TNserver  is  compatible  with 
standard  terminal  emulation  software. 
ICOM  will  offer  NetWare  for  SAA 
users  a  45%  discount  off  the  software. 
A  license  for  one  server  and  10  ses¬ 
sions  is  $1,600.  More  sessions  are 
available  for  $60  per  session,  www. 
icominfo.com 

■  EMC  and  Oracle  unveiled  soft¬ 
ware  for  Oracle  databases  that 
guards  against  data  corruption  origi¬ 
nating  from  any  layer  between  Oracle 
databases  and  Symmetrix  storage 
arrays  Called  EMC  Double  Check¬ 
sum,  the  software  lets  Symmetrix 
storage  units  calculate  errors,  known 
as  checksums,  for  each  request, 
which  it  compares  with  Oracle  check¬ 
sums.  If  the  checksums  match,  the 
data  is  written  to  disk.  If  they  don't, 
the  system  administrator  is  notified 
and  can  take  action  make  repairs. 
Double  Checksum  is  available  now 
starting  at  $2, 600. www.emc.com; 
www.oracle.com 
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NetworkWorld 


■  TCP/IP,  LAN/WAN  SWITCHES 

■  ROUTERS  ■  HUBS 

■  ACCESS  DEVICES  ■  CLIENTS 

■  SERVERS  ■  OPERATING  SYSTEMS 

■  VPNS  ■  NETWORKED  STORAGE 


Check  Point  tools  ease 
VPN  administration 


■  BY  TIM  GREENE 

REDWOOD  CITY,  CALIF  —  Check  Point 
Software  is  adding  management  fea¬ 
tures  to  its  VPN-l/Firewall-1  software  it 
says  will  make  it  easier  for  customers 
to  add  and  configure  their  IP  Security 
VPN  sites. 

Three  new  tools,  known  as  One  Click 
VPN,  One  Click  Extranet  and  One  Click 
Certificate,  automate  procedures  for 
expanding  VPNs  and  adding  remote 
users,  which  saves  time  and  eliminates 
manual  processes  that  invite  human 
error.  As  companies  add  more  sites  and 
remote  users  to  VPNs,  the  complexity  of 
making  changes  spirals  because  VPN 
servers  at  every  existing  site  have  to 
be  updated. 

The  One  Click  VPN  software  feature  on 
Check  Point’s  Secure  Update  manage¬ 
ment  platform  asks  users  to  enter  the  IP 
address  of  a  new  site.  It  then  configures 
the  new  gateway  with  the  policies  that 
have  been  set  for  the  VPN  and  distrib¬ 
utes  information  about  the  site  to  the 
VPN  gateways  at  all  the  other  sites. 
Remote  access  users  connecting  via  PC 


without  a  gateway  cannot  be  added  in 
this  way,  but  that  capability  is  planned, 
Check  Point  says. 

One  Click  Extranet  is  designed  for  link¬ 
ing  a  VPN  with  a  business  partner.  To 
work,  the  software  requires  that  both 
parties  have  Check  Point  gateways  in 


their  networks  as  well  as  Check  Point 
management  servers.  The  management 
servers  share  data  about  the  gateways 
they  control,  and  administrators  can 
then  configure  their  gateways  to  let 
them  establish  encrypted  IPSec  tunnels. 
One  Click  Extranet  is  a  misnomer 
though,  because  it  requires  more  than  a 
single  mouse-click  to  work. 

One  limitation  of  the  VPN  and  Extranet 
One  Click  features  is  that  they  cannot  be 
used  on  the  same  server  at  the  same 
time. 

Valuable  tools 


Extreme  box  offers  branch 
offices  LAN/WAN  options 


■  BY  PHIL  HOCHMUTH 

SANTA  CLARA  —  Extreme  Networks 
last  week  introduced  a  box  that  offers  a 
mix  of  WAN  and  LAN  capabilities  that 
could  let  remote  branch  customers  sim¬ 
plify  their  environments  by  supporting 
routing  and  switching  technologies  in  a 
single  box. 

Extreme’s  low-end  addition  to  its 
Alpine  switch  family,  the  3802,  could 
be  used  as  an  all-in-one  box  for  LAN  and 
WAN  connectivity  in  an  enterprise 
branch  or  as  central  premises  equip¬ 
ment  in  a  metropolitan  service  pro¬ 
vider’s  network. The  combination  of  LAN 
and  WAN  ports  crunched  into  a  single 
box  helps  users  reduce  the  amount  of 
equipment  needed  to  deploy  and  man¬ 


age  at  a  remote  site. 

The  Alpine  3802  is  a  four-slot  chassis 
designed  to  connect  an  enterprise 
branch  office  to  a  main  site  over  several 
types  of  WAN  links.  The  box  supports 
Extreme’s  T-l,  E-l  and  T-3  blades  for 
traditional  telephone  company  WAN 
connectivity. 

These  blades  also  include  technology 
based  on  the  IEEE’s  emerging  802.3h 
standard  for  last-mile  Ethernet.  By  run¬ 
ning  Ethernet  overT-1  or  DS-3  links  in  the 
last  mile,  information  such  as  Layer  2 
quality  of  service  and  virtual  LAN  tags 
can  be  maintained  across  a  WAN, 
Extreme  says. 

The  box  can  also  be  fitted  with  any  LAN 
modules  for  the  larger  Alpine  3804  or 

See  Extreme,  page  22 


Still,  companies  of  all  sizes  should  find 
these  tools  valuable,  says  Jeff  Wilson, 
research  director  for  Infonetics.“For  big 
users  with  lots  of  sites, setting  up  VPNs  is 
difficult,  and  [these  features  are]  mak¬ 
ing  bulk  configuration  easier.  For  small¬ 
er  enterprises,  [Check  Point  is]  making  it 
easier  to  establish  the  obvious  fire¬ 
wall/VPN  configurations  that  are  useful 
in  smaller  VPNs,”  he  says. 

The  more  sites  you  manage,  the  more 
important  this  is,  says  Paul  Kahyet,  chief 
systems  engineer  for  Schlumberger  Net¬ 
work  Solutions,  which  runs  Check  Point 
VPNs  for  Schlumberger’s  petroleum 
affiliate  and  other  corporations. 

“We  are  concerned  about  how  easy  it 
is  to  add  a  site.  Do  you  have  to  touch  all 
See  Check  Point,  page  22 
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3  Not  work  Wo  rid 


Time  and  again  I  have  used  this  col¬ 
umn  to  chronicle  the  pain  associated 
with  socalled  “evolutionary”  technol¬ 
ogy  upgrades.  Now,  there’s  a  new  type  of 
technology  upgrade  with  which  network  IT 
shops  must  contend  — “nonlinear”  or  “rev¬ 
olutionary”  technology  upgrades. 

I  refer  to  them  as  “disruptive”  technolo¬ 
gies  because  that’s  precisely  what  they 
are.  Networks  managers  should  brace  for 
a  wave  of  these  disruptive  technologies, 
which  are  poised  to  hit  us  all  at  once. 

In  just  two  weeks,  Sandra  Gittlen, 
Network  World's  events  editor,  and  I  hit 
the  road  again  for  a  six-city  coast-to- 
coast  free  seminar  tour  titled  State  of 
the  LAN/MAN:  Embracing  Disruptive 
Technologies.  (Find  out  if  this  tour  is 
coming  to  a  city  near  you  at  www.nwfu- 
sion.com,  DocFinder:  6832.) 

During  the  State  of  the  LAN/MAN  tour, 
we’ll  hear  about  disruptive  technologies 


Embracing  disruptive  technologies 


such  as  pervasive  security,  metropolitan- 
area  networks  (MAN),  storage  over  IF? 
high-speed  wireless  and  even  voice 
over  IP 

These  disruptive  technologies  are  dou¬ 
bly  hard  to  embrace  because  they  do  not 
mesh  well  with  your  existing  infrastruc¬ 
ture.  Yet,  their  business  ramifications  are 
so  compelling  they  disrupt  the  normal  IT 
evolutionary  cycle.  Consider  the  issues 
these  new  technologies  raise: 

MANs.  No  sooner  do  you  begin  to  get 
a  handle  on  your  WAN  connections 
than  viable  high-speed  metropolitan  ser¬ 
vices  happen  along  that  potentially  will 
drop  a  huge  bandwidth  pipe  at  your 


doorstep.  There  are  several  issues  to 
consider: 

•  When  you  embrace  multimegabit 
MANs,  can  you  do  away  with  traffic¬ 
shaping  at  the  edge?  I  mean,  will  all  that 
available  bandwidth  obviate  the  need 
for  traffic  grooming,  or  are  there  sound 


reasons  why  you  should  continue  to 
shape  traffic  flows? 

•  Will  the  torrent  of  a  full-speed  100M 
bit/sec  Fast  Ethernet  MAN  connection 
upset  the  “equilibrium”  of  your  campus 
networks? 

•  How  will  the  various  implementations 
of  quality  of  service,  implemented  both  in 
the  MAN  service  provider  network  and  in 
your  LAN,  mesh  to  provide  end-to-end  QoS, 
or  will  you  encounter  QoS  differences? 

Security.  What  impact  will  pervasive 
security  have  on  performance  and  sys¬ 
tems  management?  Think  about  it. 
Maybe  your  company  plans  to  adopt 
voice  over  IP  for  campus  communica¬ 
tions.  But  with 
any  layered  secu¬ 
rity,  you  intro¬ 
duce  an  extra 
layer  of  process¬ 
ing  on  traffic  that 
flows  across  the 
VPN  switch  or 
the  firewall.  Now,  if  that’s  real-time  voice 
traffic,  will  the  extra  delay  affect  voice 
quality? 

Storage  over  IP  and  QoS.  Organizations 
are  working  hard  to  support  QoS  in  their 
networks,  and  the  idea  here  all  along  has 
been  to  provide  real-time  delay-sensitive 


traffic  with  priority  over  bulk  data  trans¬ 
fers.  But  in  the  world  of  storage-area  net¬ 
works,  a  heavy  emphasis  is  placed  on 
retrieving  bulk-stored  data.  How  will  that 
play  vis-a-vis  QoS  traffic  priorities? 

Wireless.  Is  Wireless  Encryption  Pro¬ 
tocol  good  enough  or  is  there  no  such 
thing  as  a  secure  campus  wireless  LAN? 
Early  indications  are  that  WEP  may  not  be 
as  secure  as  many  people  need  it  to  be. 
Moreover,  on  the  wireless  side,  will  54M- 
bit/sec  (802.11a)  wireless  gear  “replace” 
1  lM-bit/sec  wireless  the  way  Fast  Ethernet 
replaced  Ethernet? 

Surely,  these  issues  potentially  may 
disrupt  existing  network  infrastructure 
architectures,  or  at  least  give  net  design¬ 
ers  pause  for  rethinking  their  net  evolu¬ 
tion  in  favor  of  something  more  dramat¬ 
ic.  Join  us  at  the  State  of  the  LAN/ 
MAN:  Embracing  Disruptive  Technolo¬ 
gies  tour  and  learn  what  Cisco,  Extreme 
Networks,  Enterasys  Networks,  Foundry 
Networks  and  Riverstone  Networks  have 
to  say. 

Tolly  is  president  of  The  Tolly  Group ,  a 
strategic  consulting  and  independent  test¬ 
ing  company  in  Manasquan,  NJ.  He  can  be 
reached  at  ktolly@tolly.com  or  www.toUy. 
com. 


Network  managers  should  brace  for  a 
wave  of  these  disruptive  technologies, 
which  are  poised  to  hit  us  all  at  once. 


Extreme 
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3808  chassis,  such  as  24-  and  32-port 
10/100  blades,  and  four-port  lOOOBase-T 
blades.  Fiber-based  Fast  and  Gigabit 
Ethernet  modules  are  also  available  for 
connecting  the  switch  to  services  from  a 
metropolitan  Ethernet  service  provider, 
or  over  dark  fiber  in  a  private  metropoli¬ 
tan-area  network. 

For  a  more  basic  deployment,  the  Alpine 
3802  could  be  installed  in  an  enterprise 
wiring  closet  as  a  workgroup  connectivity 
switch  with  Gigabit  Ethernet  uplinks  to  a 
LAN  backbone. 

For  connecting  clients  in  buildings 
without  Category  5  network  cabling,  a 
very-high  bit  rate  DSL  (VDSL)  module 
can  also  be  added. This  module  can  pro¬ 
vide  10M  bit/sec  network  connectivity 
to  end  users  in  an  office  over  telephone 
wiring. 

Outfitting  the  Alpine  3802  for  a  WAN  or 
LAN  deployment  could  involve  playing 
a  bit  of  musical  modules.  The  box  can 
be  run  in  two  modes  —  standard  and 
extended,  depending  on  the  deploy¬ 
ment.  In  standard  mode,  two  of  the  three 
payload  slots  are  active  and  can  accept 
any  Alpine  family  LAN  switching  mod¬ 
ule  In  extended  mode, all  three  slots  are 
active,  but  only  one  can  accept  any 
Alpine  Ethernet  module;  the  other  two 
slots  can  accept  T-l,  E-l,  T-3  or  VDSL 
b>ades.  Extreme  says  standard  mode  is 
intended  for  a  LAN  wiring  closet  con¬ 
figuration,  while  extended  mode  is 
geared  for  wide-area  or  service  provider 
deployments. 


{sy.lL'jl 


Extreme’s  latest  Alpine  switch,  the  3802,  sup¬ 
ports  several  WAN  interfaces  and  can  be 
used  as  a  branch  office  router  or  LAN  switch. 

Competitors  of  the  Alpine  3802  that  offer 
switching  and  routing  for  remote  offices 
include  Cisco’s  Catalyst  4224  Access  Gate¬ 
way  Switch  and  Vertical  Networks’  line  of 
InstantOffice  products.  However,  the  Al¬ 
pine  provides  VDSL  and  more  support  for 
Gigabit  Ethernet  than  the  Cisco  and 
Vertical  products,  but  less  telephony  and 
voice-over-iP  support. 

The  Alpine  3802  is  available  now  for 

$8,000. 

Extreme:  www.extremenetworks.com 


Subscribe  to  our  free 
newsletter.  DocFinder:  5434 
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your  different  gateways,  or  do  you  do  it 
through  your  management  system  and 
that  management  system  updates  to  all 
the  different  sites  automatically?  That  is 
one  of  the  big  factors  we  looked  at,” 
Kahyet  says. 

Easing  configurations 

Simplifying  VPN  configuration  is  a 
major  thrust  of  VPN  vendors  that  make 
gateways,  such  as  WatchGuard  Technol¬ 
ogies,  NetScreen  Technologies  and 
SonicWall,  as  well  as  service  providers 
that  offer  managed  services,  such  as 
OneSecure  and  SmartPipes. 

For  remote-access  IPSec  VPNs,  One 
Click  Certificate  makes  it  easier  to  dis¬ 
tribute  digital  certificates  that  are  stored 
on  remote  PCs  to  support  strong  authen¬ 
tication  of  remote  users.  These  certifi¬ 
cates  require  a  certificate  authority  to 
issue  them,  and  Check  Point  has  built 
one  into  its  Next  Generation  manage¬ 
ment  software.  This  eliminates  the  need 
for  companies  to  set  up  their  own  cer¬ 
tificate  authorities  or  hire  a  service 
provider  to  handle  them. 

The  Check  Point  certificate  authority 
issues  certificates  to  remote  PCs  that 
connect  to  the  VPN  via  dial-up  Internet 
connections.  If  the  Check  Point  Secure 
Remote  VPN  client  on  the  remote 
machine  has  authentication  informa¬ 
tion  sent  via  e-mail  or  floppy  disk  by 
the  network  administrator,  the  certificate 
authority  automatically  issues  the  cer¬ 
tificate. 


Earlier  versions  of  Check  Point’s  cer¬ 
tificate  authority  supported  distribut¬ 
ing  digital  certificates  among  gateways 
only. 

A  new  feature  of  Secure  Remote  helps 
balance  the  load  between  VPN  servers 
that  are  paired  at  a  single  busy  site.  Until 
now,  the  remote  software  would  be  con¬ 
figured  to  connect  with  one  server  or 
the  other.  Now,  each  remote  machine 
connects  to  one  or  the  other  at 
random.  This  reduces  the  chances  that 
either  server  will  get  swamped  should 
all  its  assigned  users  try  to  connect 
at  once. 

Check  Point  also  says  Siemens  and 
Compaq  are  introducing  hardware  that 
supports  Firewall-l/VPN-1  software.  Sie¬ 
mens’ appliance, called  4  Your  Safety,  fea¬ 
tures  four  10/100  Ethernet  ports  and  has 
a  firewall  speed  of  250M  bit/sec.  The 
company  has  not  rated  the  speed  of  its 
VPN  capability  yet. 

The  device  costs  $6,200  for  a 
model  with  one  processor  and  $7,000 
for  two. 

This  will  pit  Siemens  against  another 
Check  Point  partner,  Nokia,  which  also 
makes  VPN  gateway  appliances  based 
on  Check  Point  software. 

Check  Point:  www.checkpoint.com 

More  online! 

Read  how  to  avoid  VPN 
performance  overkill  and 
check  out  a  Checkpoint 
user  newsgroup  on  VPNS. 
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What  defines  the  best  in  data  storage  solutions? 
A  system  that  fits  your  space,  storage,  and  budget 
parameters.  A  modular  system  that  scales  from 
540  Gigabytes  all  the  way  to  11  Petabytes. 

A  tape  drive  with  a  precedent-shattering  24MB 
per  second  sustained  transfer  rate.  And  robotics 
proven  over  years  and  years  of  24/7  pounding. 
In  short,  it  takes  Sony. 


if// 

DTF 

Digital  Tape  Format 


For  further  information  on  Sony 
Data  Storage  Systems,  please  call: 


1-800-829-7669 


www.sony.com/datasystems 


Advanced  Storage  by  Sony 


Sony  Data  Systems  data  storage  products  have 
long  been  the  choice  where  the  volumes  of  data 
are  vast  and  the  access  demands  are  severe,  such 
as  data  centers,  and  in  online  services,  government, 
broadcasting,  seismology,  and  medicine.  And  Sony 
systems  are  based  on  an  unwavering  commitment 
to  tape  technology.  Our  latest  DTF-2  tapes  store 
up  to  518GB*  And  incorporate  either  an  ultra-wide 
SCSI  or  Fibre  Channel  interface.  And  our  latest 
midrange  automated  tape  libraries  fit  your  space 
reguirements  and  your  budget,  not  to  mention 
your  SAN  and  NAS  environments. 

So  if  your  data  storage  reguirements  are  more 
demanding  then  ever,  your  choice  is  easier  than  ever. 


*51808  compressed.  200GB  uncompressed 

02001  Sony  Electronics  Inc  AH  rights  reserved.  Reproduction  in  whole  or  m  part  without  written  permission  is  prohibited.  Features  and 
specifications  subject  to  change  without  notice  Sony.  Advanced  Storage  by  Sony.  DTF  and  the  DTF  logo  are  trademarks  of  Sony 


Sony  DTF  Data  Storage 
Products:  A  Perfect  Fit 
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If  you  don'L.your  competition  will! 

Gaining  the  competitive  advantage  is  more  crucial  than  ever  in  today's  business  climate,  and 
Gigabit  Ethernet  over  your  current  copper  plant  is  the  right  solution  to  increase  network  bandwidth, 
while  delivering  strategic  business  initiatives  cost-effectively. 

Foundry  Networks  was  first  to  market  and  still  leads  with  3  of  the  industry's  most  powerful  Gigabit 
Ethernet  over  Copper  switches. ..Fastlron  II  GC,  Fastlron  II  Plus  GC,  and  Fastlron  III  GC.  So,  whether 
it  is  Switch  to  Switch,  Switch  to  Server  Farm,  or  Switch  to  Desktop. ..Foundry's  Fastlron  products  will 
deliver  1 0X  performance  improvements  to  your  network,  your  business  and  ultimately-your  bottom  line. 

Imagine  what  lOOOBase-T  performance  can  mean  to  your  network.  Contact  us  today  for  your 
Gigabit  Ethernet  over  Copper  winning  solution. 

1-888-TURBO-LAN  (887-2652) 

For  free  white  paper  go  to:  www.foundrynetworks.com/copper 


Fastlron  III  GC 


Fastlron  II  Plus  GC 


Fastlron  II  GC 
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8. 


I  want  to  receive/continue  to  receive  my  FREE 
subscription  to  Network  World.  No,  thank  you.  □ 


Signature  (required)  Date 

QUALIFY:  You  must  supply  your  company  name  and  address.  If  military,  please  specifiy 
branch/base.  If  government,  please  specify  division. 


Name 


Title 


Company 


Division/Mail  StopW  Hilary  Branch  or  Base 


Street  Address 


City 


State 


Zip 


Business  phone  ( _ ) _ 

FAX  ( _ ). _ 

E-mail  address _ 

We  would  like  to  send  you  periodic  information  via  e-mail  on  3rd  party  networking  products/services. 
□  Check  here  if  you  DO  NOT  wish  to  receive  this  information. 


If  there  is  a  parent  company,  please  provide  name: _ 

□  My  home  address  is  also  my  business  address. 

Optional  delivery  address:  Enter  your  home  address  below  if  your  company  will  not  accept  delivery  at  your  business  address: 


Street  Address 


City  State  Zip 

Publisher  reserves  the  right  to  serve  only  those  individuals  who  meet  publication  qualifications.  ALL  questions  must  be 
answered.  Incomplete  forms  will  not  be  processed.  Free  subscriptions  available  to  qualified  US  applicants.  International  rates 
available  upon  request. 
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Please  indicate  the  Web/Security/LAN/lnternetworking/Wireless/Mobile/WAN  Equipment/ 
Carrier  Services  that  you  are  currently  involved  in  purchasing  or  plan  to  purchase: 

(check  ALL  that  apply)  A.  Currently  involved  in  purchasing  B.  Plan  to  purchase 


WEB - 

A  B 

□  01.  □  Web  Servers/Software 

□  02.  □  Web  Traffic  Management 

□  03.  □  Electronic  Commerce  Tools 


SECURITY  - 
A  B 


□  04.  □  Web  Development  Tools 

□  05.  □  Web  Content  Management 

□  06.  □  Web  Collaboration/ 

Groupware 


□  10.  □  Firewalls 

□  11.0  Anti-Virus  Software 

□  12.  □  Private  Key  Encryption  Tools 


□  13.  □  DES  Encryption  Tools 

□  14.  □  Authentication  Tools 

□  15.  □  Intrusion  Detection 


A  B 

□  07.  □  Web  Acceleration/Caching/ 

Load  Balancing 

□  08.  □  Web  Hosting  Services 

□  09.0  Other 

A  B 

□  16.  □  Certificate  Authorities 

□  17.  □  Biometrics 

□  18.  □  Other 


LANs/INTERNETWORKING 


A  B 

□  19.  □  Fast  Ethernet 

□  20.  □  Gigabit  Ethernet 

□  21.  □  Layer  3-7  Switches 

□  22.  □  ATM  Switches 

□  23.  □  Routers 

□  24.  □  Network  Attached  Storage 

(NAS) 

□  25.  □  Storage  Area  Networks  (SANs) 

WIRELESS/MOBILE  - 

A  B 

□  37.  □  Wireless  LANS 


A  B 

□  26.  □  Storage  Backup 

(Optical,  Disk,  Tape,  RAID) 

□  27.  □  Network  Test/Diagnostic 

Tools 

□  28.  □  Uninterruptable  Power 

Supplies  (UPS) 

□  29.  □  Network  Interface  Cards 

(NICs,  PCMCIA) 


A  B 

□  30.  □  Hubs/Intelligent  Hubs/ 

Stackable  Hubs 

□  31.  □  Cables, Connectors,  Baiuns 

□  32.  □  WiringTiber  Systems 

□  33.  □  Net  Management  Systems 

□  34.  □  Voice  Over  IP  (VoIP)  Tools 

□  35.  □  Network  Analyzers 

□  36.  □  Other  Local-Area  Network/ 

Internetworking 


A  B  A  B 

□  39.  □  Wireless  LAN  Extension  Tools  □  41.  □  PDAs 


□  40.  □  Mobile  Data  □  42.  □  Other  Remote/Wireless 

Equipment/Services 


A  B 

□  48.  □  Voice/Video  over  IP 

Gateways 

□  49.  □  Modems 

□  50.  □  Cable  Modems 

□  51.  □  xDSL  Products 

□  52.  □  Diagnostic/Test  Equipment 


A  B 

□  53.  □  DSUs/CSUs 
D  54.  □  PBXs 

□  55.  □  Call  Center  Tools 

□  56.  □  Videoconferencing  Gear 

□  57.  □  ISDN  Equipment/Services 

□  58.  □  Other  WAN 

Equipment/Services 


□  38.  □  Wireless/Cell  Phones 

WAN  EQUIPMENT - 

A  B 

□  43.  □  Frame  Relay  Equipment 

□  44.  □  Bandwidth  Managers 

□  45.  □  Bandwidth  Shaping/QOS 

Tools 

□  46.  □  VPN  Equipment 

□  47.  □  ATM  Switches 

CARRIER  SERVICES _ 

A  B 

□  59.  □  Internet  Access 

□  60.  □  Private  Lines 

□  61.  □  Frame  Relay  Services 

□  62.  □  ADSl/DSL 

□  63.  □  T-l/T-3  Services 


A  B 

□  64.  □  ATM  Services 

□  65.  □  Managed  Services 

□  66.  □  VPN  Services 

□  67.  □  LAN-Extension  Services 

□  68.  □  OC-3/OC-12 


A  B 

□  69.  □  Wavelength  Services 

□  70.  □  Dark  Fiber 

□  71.  □  Other  Carrier  Services 

A  B 

None  of  the  above  (1  -71)  □  72.  □ 


What  is  the  principal  business  activity  at  your  location? 

(check  ONE  only) 


01.0  Manufacturing  (Non-Computer/ 
Communications  OEM) 

02.D  Finance/Banking 
03.  □  Insurance/Real  Estate/Legal 
04. □  Health  Care  Services 
05.D  Hospitality/Entertainment/ 
Recreation 


09.  □  Utilities/Process  Industries 
(Mining/Construction/ 
Petroleum  Refining,/ 
Agriculture/Forestty) 

10. D  Govemment/Military 

11.  □  Consulting (Independent) ' 

12.  □  Education 


^.□Manufacturing  (Computer/ 
Communications/OEM) 

17. D  Resellers/VARs/VADs/ 

Integrators/Distributors* 

(Computers/Communications) 

18.  □  Other  (please  specify) 


06.  □  Media/TV/Cable/RadicVPrint 
07.  □  Retail/Wholesale 

Trade/Business  Services 
08.  □Transportation 


13. D  Carriers/Voice/Data/ISP 

14.  □  Web  Hosting/HSP 

15. DASP/SSP/MSP 


*Attn  Consultants,  Integrators, 
Distributors,  Resellers:  Please  com¬ 
plete  form  based  on  ALL  clients  and 
your  own  business  needs 


2. 


P:  What  is  your  primary  job  function?  (check  one  only) 

S:  What  additional  job  functions  are  you  involved  in?  (check  all  that  apply) 

PS  PS 


□  1.  □  Network  Management 

□  2.  □  CTO/CTO/I. S/IT/MIS/ 

Systems  Management 

□  3-D  LAN  Management 


□  4.  □  Datacom/Telecom  Management 

□  5.  □  Intemet/Intranet/Web/ 

E-Commerce  Management 

□  6.  □  Engineering  Management 


□  7.  □  Corporate  Management 

(CEO,  COO,  CFO,  Pres.,  VP, 
Dir.,  Mgr.) 

□  8.  □  Consultant  (Independent) 

□  9.  □  Other  (please  specify) 


What  is  the  estimated  value  of  network  equipment  and  services  that  you  specify, 
recommend,  or  approve  the  purchase  of?  (Please  print  the  appropriate  number  code  on 
the  line  next  to  each  product  category.  Please  complete  ALL  categories  A-0.) 


1.  $100  Million  or  more 

2.  $50  Million  to  $99.9  Million 

3.  $25  Million  to  $49.9  Million 

4.  $10  Million  to  $24.9  Million 

5.  $1  Million  to  $9.9  Million 

6.  $100,000  to  $999,999 


$50,000  to  $99,999 
Under  $50,000 
None  of  the  above 


.  Large  Systems 
( Mainframes/Minis) 

_  Desktops 

(Micros/Laptops/  Workstations) 
_  Mobile 

(including  PDAs,  Wireless) 

.  Servers 
.LANs 

_  WAN  Equipment 
Carrier  Services 


H _ Internet/Weh/E-commerce 

I  _ Intranet/Extranet 

J  _ Internetworking 

(including  Routers,  Switches) 

K _ Storage 

L _ Remote  Access 

M _ Peripherals 

N _ Software 

O _ Service/Support  Services 


E^Bwhat  is  the  total  number  of  sites  for  which  you  have  purchase  influence? 

!^3jcUK*0N£wlr! 

1.  D100 


1.  □  100+  2.  □  50  to  99  3.  □  20  to  49  4.  □  10  to  19  5.  □  2  to  9  6.  □  1  7.  □  None 


Please  indicate  the  Systems/Peripherals/Software/Applications/Business  Services 
that  you  are  currently  involved  in  purchasing  or  plan  to  purchase:  (check  all  that  apply) 


A.  Currently  involved  in  purchasing  B.  Plan  to  purchase 


SYSTEMS/PERIPHERALS  - 

A  B 

□  01.  □  Laptops/Notebooks 

□  02.  □  Desktops 

□  03.  □  Intel-Based  Servers 

□  04.  □  Rise-Based  Servers 

□  05.  □  Print  Servers 

SOFTWARE/APPLICATIONS  _ 

A  B 

□  14.  □  DesktofVServer  Operating 

Systems 

□  15.  □  Network  Management 

□  16.  □  Systems  Management 

□  17.  □  Directory  Services 

□  18.  □  E-Mail 

□  19.  □  Groupware 


A  B 

□  06.  □  Pax  Servers 

□  07.  □  Remote  Access  Servers 

□  08.  □  Video  Servers 

□  09.  □  Mid-Range  Systems 

(including  workstations) 


A  B 

□  20.  □  Database  Management 

Systems 

□  21.0  Customer  Resource 

Management  (CRM) 

□  22.  □  Enterprise  Resource 

Planning  (ERP) 

□  23.  □  XML  Tools 

□  24.  □  Desktop  Videoconferencing 


A  B 

□  10.  □  Mainframes 

□  1 1.  □  Printers 

□  12.  □  Enclosures/Racks/Fumiture 

□  13.  □  Other  Computers/ 

Peripherals 


A  B 

□  25.  □  Middleware 

□  26.  □  Document  Management  Tools 

□  27.  □  Site  Metering  Tools 

□  28.  □  Software  Distribution  Tools 

□  29.  □  Data  Warehousing 

□  30.  □  Applications  Development 

Tools 

□  31.  □  Other  Software/Applications 


BUSINESS  SERVICES - 

A  B  A  B  A  B 

□  32.  □  Application  Service  □  33.  □  Systems  Integration/  □  35.  □  Other  Services 

Provider  Services  Consulting  A  B 

□  34.  □  Education/Training  Services  None  of  the  above  (1  -  35)  □  36.  □ 


jet  Please  indicate  the  platforms  that  are  currently  installed/planned:  (check  all  that  apply) 

A.  Currently  installed  B.  Planned  for  purchase 

NFTWORK  PROTOCOL 

A  B 

□  01.D  TCP/IP  v4 

□  02.  □  TCP/IP  v6 

A  B 

□  03.  □  SNA/APPC/APPN/LU6.2 

□  04.  □  Novell  IPX/SPX 

A  B 

□  05.  □  NETBIOS/NETBUE1 

□  06.  □  NFS 

□  07.  □  Other  Network  Protocols 

A  B 

□  08.  □  Gigabit  Ethemel 

□  09.  □  Switched  Ethernet 

□  10.  □  Fast  Ethernet 

□  11.  □  Ethemel 

□  12.  □  ATM 

nFSKTflP/SFRVFR  OPERATING  SYSTEMS 

A  B 

□  13.  □  Token  Ring/Token  Ring 

Switching 

□  14.  □  Layer  3-7  Switching 

□  15.  □  FDDI 

□  16.  □  Fibre  Channel 

□  17.  □  Wireless  LANs 

A  B 

□  18.  □  DSL 

Q  19.  □  ISDN 

□  20.  □  Frame  Relay 

□  21.  □  Private  Line  Tl,  T3,  OC-3, 

OC-12 

□  22.D  Other  LAN/WAN 

Environment 

A  B 

□  23.  □  Windows  2000 

□  24.  □  Windows  95/98 

□  25.  □  Windows  NT/Windows  2000 

□  26.  □  Novell  (NetWare  5.X,  4.X, 

3.X,  2.X) 

□  27.  □  LINUX 

A  B 

□  28.  □  Intel  based  UNIX 

□  29.0  RISC  based  UNIX 

(incL  SOLARIS) 

□  30.  □  IBM  MVS/VM/VS E/ESA 

□  31.  □  OS/400 

□  32.  □  Digital  VMS 

□  33.  □  Macintosh 

A  B 

□  34.  □  Palm  OS 

□  35.  □  Windows  CE 

□  36.  □  Other  Network  Operating 

System 

A  B 

None  of  the  above  (1-  36)  □  37.  □ 

Continued  on  next  page... 


Continued  from  page  one... 


5. 

What  is  the  total  number  of  Servers/Clients  installed/planned  at  your  location/in  your 
entire  Organization?  (check  ONE  box  in  each  column) 

SERVERS 

CLIENTS 

At  Location  Entire  Org. 

At  Location 

Entire  Org. 

A 

8 

c 

D 

□  I.  50,000+ 

□ 

□ 

1. 

50,000+ 

□ 

□  2.  10,000  to  49,999 

□ 

□ 

2. 

10,000  to  49,999 

□ 

□  3.  1,000  to  9,999 

□ 

□ 

3. 

1,000  to  9,999 

□ 

□  4.  100  to  999 

□ 

□ 

4. 

100  to  999 

□ 

□  5.  50  to  99 

□ 

□ 

5. 

50  to  99 

□ 

□  6.  10  to  49 

□ 

□ 

6. 

10  to  49 

□ 

□  7.  1  to  9 

□ 

□ 

7. 

1  to  9 

□ 

□  8.  none 

□ 

□ 

8. 

none 

□ 

m 

What  is  the  estimated  number  of  employees  in  your  entire  organization/at  your 
location?  (check  ONE  in  each  section) 

A.  Entire  organization: 

1.  □  Over  20,000  5.  □  1,000  -  2,499 

2.  □  10.000  -  19,999  6.  □  500-999 

3.  □  5,000-9,999  7.  □  499  or  less 

4.  □  2,500-4,999 

B.  At  your  location: 

1.  □  Over  20,000  6.  □  500-999 

2.  □  10,000-  19,999  7.  0  250  -  499 

3.  □  5.000  -  9.999  8.  0  100  -  249 

4.  □  2,500-4,999  9.  □  99  or  less 

5.  □  1,000-2,499 

II. 

Which  of  the  following  hardware  platforms  are  installed/planned  in  your  company? 

(check  ALL  that  apply) 

A  -  Servers  B  -  Workstations/Desktops/Laptops 

1.  □  IBM  (Mainframes)  5.  □  Unisys  l.  Q  Sun  Microsystems  5.  □  Dell 

2.  □  IBM  RS/6000  6-  □  H-P  2.  □  H-P  6.  □  Gateway 

3.  □  IBM  AS/400  7.  Li  Other  3  q  Compaq/Digital  7.  □  Fujitsu 

4.  □  Compaq/Digital/  4.  □  IBM  8.  □  Other 

Tandem 

12. 

What  is  the  estimated  gross  revenue  of  your  entire  company/institution? 

(check  ONE  only) 

1.  □  $20  Billion  or  More  5.  □  $100  Million  to  $499.9  Million  9.D  $4.9  Million  or  less 

2.  □  $10  Billion  to  $19.9  Billion  6.  □  $50  Million  to  $99.9  Million  10C  None  of  the  above 

3.  □  $1  Billion  to  $9.9  Billion  7.  □  $10  Million  to  $49.9  Million 

4.  □  $500  Million  to  $999.9  Million  8.  □  $5  Million  to  $9.9  Million 

1  ®  1  What  is  your  scope  and  involvement  in  purchasing  decisions  for  network  products 

|-  and  services  tor  your  enterprise? 

A.  Scope  (check  ONE  only) 

CORPORATE/ENTERPRISE: 
l.D  Entire  Enterprise/  3.D  Division/Multiple 

Multiple  Enterprises  Divisions 

B.  Involvement  (check  ALL  that  apply) 

1. D  Create  Network/IT  4.D  Evaluate 

Strategy  Products/Services 

2. D  Recommend/Specify  5.D  Determine  the  Need 

Brand  6.0  None 

3. D  Approve  Purchase 

2.D  Multinational  4.0  Department 

Enterprise  5.D  None 

Sign  Up  and  Start  Immediately  Receiving  our 
FREE  Weekly  e-Newsletter  This  Week  on  NWFusion 
and  easily  stay  current  on  today’s  networking  challenges! 


YES!  Start  my  subscription 


immediately.  My  e-mail 


address  is: 


Your  colleagues  may  also  qualify  for  a  FREE  subscription! 

Please  list  below  names  and  job  functions  of  other  individuals  at  your  location  who  might  also  benefit  from  a  FREE  subscription  to  |\|g{yy(][j 

NAME _ JOB  FUNCTION _  E-MAIL  ADDRESS _ 


NAME 


JOB  FUNCTION, 


NAME 


JOB  FUNCTION. 


NAME 


JOB  FUNCTION. 


E-MAIL  ADDRESS 


E-MAIL  ADDRESS 


E-MAIL  ADDRESS 


FORM  0002 


NO  POSTAGE 
NECESSARY 
IF  MAILED 
IN  THE 

UNITED  STATES 


BUSINESS  REPLY  MAIL 

FIRST  CLASS  MAIL  PERMIT  NO  1752  NORTHBROOK  IL 

POSTAGE  WILL  BE  PAID  BY  ADDRESSEE 


PO  BOX  3091 

NORTHBROOK  IL  60065-9928 


I 


I 


I 


II.. I, ,1,1, 1 
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■  IBM  last  week  made  another  dra¬ 
matic  bet  on  the  competitive  advan¬ 
tages  of  backing  the  Linux  operating 
system:  Big  Blue  is  donating  a  pricey 
software  platform  for  integrating 
application  development  tools 
from  various  vendors  to  a  newly 
formed  open  source  development 
advocacy  organization.  IBM  spent 
more  than  a  year  and  invested  $40 
million  in  developing  the  Java-based, 
open  source  software,  code-named 
Eclipse.  Eclipse  is  intended  to  simpli¬ 
fy  the  process  of  developing  software 
tools  for  multiple  operating  systems: 
Eclipse-based  software  will  run  on 
Linux  and  Microsoft  Windows,  poten¬ 
tially  saving  developers  from  having  to 
port  Windows  applications  to  Linux. 
The  software  is  designed  to  handle  a 
variety  of  development  tasks,  includ¬ 
ing  testing,  performance  tuning  and 
debugging.  Eclipse.org,  a  recently  cre¬ 
ated  open  source  consortium,  will 
manage  Eclipse.  The  group  includes 
more  than  150  software  developers 
worldwide,  including  IBM,  Red  Hat, 
Rational  Software  and  Merant  PLC. 
IBM  noted  that  its  own  suite  of  Web 
services-focused  WebSphere  applica¬ 
tion  development  tools  are  built  on  the 
Eclipse  foundation,  www.ibm.com; 
www.eclipse.org 

■  SPSS  last  week  announced  plans  to 
acquire  NetGenesis  in  a  stock  deal 
worth  $44.6  million.  SPSS  offers  data 
mining  and  predictive  analysis  tools 
for  data  warehouses  and  call  centers, 
considered  the  "offline”  processing 
side  of  analytics.  NetGenesis  offers 
the  “online”  data  collection  compo¬ 
nent.  Companies  use  its  Web  site  an¬ 
alysis  software  and  consulting  ser¬ 
vices  to  analyze  the  behavior  of  online 
customers  and  gauge  the  success  of 
online  initiatives,  such  as  marketing 
campaigns  and  site  design  modifica¬ 
tions.  Combining  NetGenesis’  Web¬ 
centric  technology  with  its  own  data 
mining  and  predictive  analysis  will  let 
SPSS  deliver  an  enterprise-scale  ana¬ 
lytics  set  from  one  vendor,  SPSS  says. 
The  companies  will  operate  indepen¬ 
dently  until  the  deal  closes,  which  is 
expected  to  happen  this  quarter. 
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Lessons  from  Leading  Users 


Stentor:  Just  what  the  doctor  ordered 


■  BY  JASON  MESERVE 

The  diagnosis  at  Ann  Arbor  Veterans 
Administration  Healthcare  System 
in  Michigan  was  that  X-ray  film  sys¬ 
tem  costs  were  skyrocketing  and  the 
healthcare  facility  needed  a  faster  way 
to  get  images  to  doctors.  The  prescrip¬ 
tion:  Bring  in  Stentor  imaging  technol¬ 
ogy  to  deliver  X-rays  over  the  hospital 
Intranet  without  requiring  a  network 
upgrade. 

Today  physicians  and  clinicians  at  the 
hospital  do  their  X-ray  CAT  scan  and 
magnetic  resonance  imaging  (MRI) 
result  viewing  on  a  standard  PC,  rather 
than  putting  film  up  on  a  traditional 
device  known  as  a  lightbox.  Now  doc¬ 
tors  and  staff  can  log  on  to  a  PC,  select 
a  patient  and  pick  which  images  they 
want  to  see.  Multiple  images  can  be 
selected  from  different  series  (sets  of 
images)  taken  over  a  period  of  time  to 
make  comparisons. 

Three  years  ago,  the  hospital  moved 
to  a  filmless  radiology  department,  a 
move  that  cut  developing  and  film 


Intranet  X-ray 


Looking  to  cut  X-ray  costs  and  simplify  viewing  options  for  physicians, 
Ann  Arbor  Veterans  Administration  Hospital  is  using  Stentor’s  iSite 
Imaging  server.  Here’s  how  it  works: 


o 


rays  taken. 


Digital  images  stored  in 
Picture  Archive  and  Communi¬ 
cation  System  (PACS). 


Fibre  Gigabit 
backbone 


Hospital 

network 


PACS  storage 
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Cisco  3500 
switch 


Cisco  3500 
switch 


Digital  image 
Radiology  network 
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Stentor 
iSite  server 


Images  transferred  to  iSite  server  for 
access  over  the  hospital’s  network. 


costs  about  $110,000  annually,  to 
$20,000  per  year.  The  move  also  helped 
eliminate  lost  X-rays  and  films,  which 
had  to  be  reprinted,  taking  time  away 
from  patient  care.  Despite  the  move, 


Cisco 

6500 

router 


Using  Stentor 
technology,  full- 
fidelity  images  can 
be  viewed  on  any 
standard  PC  screen. 


viewing  im¬ 
ages  was  still  cumbersome  and  expen¬ 
sive.  A  $60,000  super-high  resolution 
view  station  was  needed,  retrieval  was 

See  Hospital,  page  26 


Witness  watches  Web  customers  help  themselves 

New  tools  gauge  the  effectiveness  of  customer  self-service  tools, 


■  BY  ANN  BEDNARZ 

ROSWELL,  GA.  —  Witness 
Systems  this  week  is  expand¬ 
ing  its  lineup  of  customer  ser¬ 
vice  monitoring  tools  to  in¬ 
clude  self-service  transactions. 
Now  its  enterprise  users  can 
gauge  not  only  how  well  cus¬ 
tomer  service  agents  commu¬ 
nicate  with  callers  and  online 
customers,  but  also  how  effec¬ 
tive  their  automated  systems 
are  at  sharing  the  workload  of 
live  agents. 

Witness’  core  software  rec¬ 
ords  call  center  agents  and 
their  voice,  e-mail  and  Web 
chat  communications  with  cus¬ 
tomers.  Its  eQuality  suite  also 
includes  modules  for  perfor¬ 


mance  analysis  and  agent 
training. 

New  to  the  suite  is  eQuality 
Discover,  which  monitors  Web 
self-service  transactions. 

EQuality  Discover  automati¬ 
cally  records  and  stores  visi¬ 
tors’  Web  sessions  based  on 
user-defined  rules.  A  company 
might  opt  to  capture  any  ses¬ 
sions  during  which  a  visitor  ac¬ 
cesses  the  “Contact  us”  page,  or 
any  visits  during  which  a  shop¬ 
ping  cart  is  abandoned  or  an  e- 
commerce  transaction  is  cut 
short  with  an  error  message. 

The  software  will  automati¬ 
cally  send  a  pager  or  e-mail 
notification  to  designated  users 
when  it  initiates  a  recording. 
Through  a  browser-based  inter¬ 


face,  users  can  review  problem 
sessions  to  see  where  Web  site 
content  or  design  could  be 
improved.  A  playback  feature 
displays  the  path  taken  by  a  vis¬ 
itor  in  a  slide-show  format. 
Thumbnail  summaries  of  rec¬ 
orded  Web  visitor  sessions  also 
are  available. 

Automobile  maker  Saturn 
has  used  Witness  software 
since  1997.  It  started  with 
eQuality  Balance  for  record¬ 
ing  voice  conversations  and 
eQuality  Evaluation  for  mea¬ 
suring  agents’  performance. 
In  1998  Saturn  started  using 
eQuality  Balance  to  track  the 
data  being  accessed  and  in¬ 
put  by  agents. 

Today  at  Saturn’s  Spring  Hill, 


Tenn.,  call  center,  agents’  tele¬ 
phone  and  e-mail  transactions 
with  customers  are  recorded  at 
a  rate  of  roughly  two  transac¬ 
tions  per  week,  per  agent,  says 
Steve  Fort,  who  co-manages  the 
100-agent  center.  Fort  is  an 
account  manager  for  consult¬ 
ing  firm  EDS,  which  Saturn 
•hired  to  run  its  call  center. 

Using  the  data  gathered  by 
Witness  software,  Fort  and  his 
team  realized  agents  often 
had  to  access  multiple  direc¬ 
tories  to  retrieve  information 
for  customers.  In  response, 
they  rolled  out  a  corporate 
intranet  last  year  to  consoli¬ 
date  Saturn  resources  for  the 
agents. 

See  Witness,  page  26 


Microsoft  said  it  would  shut  down 
part  of  its  Passport  single-logon  sys¬ 
tem,  at  least  for  a  while.  This  shut¬ 
down  was  not  to  mollify  the  many  people 
who  are  concerned  about  the  privacy 
implications  of  letting  a  single  company, 
particularly  one  with  the  mixed  reputa¬ 
tion  that  Microsoft  has,  hold  the  keys  to  so 
many  kingdoms.  And  this  column  is  not 
about  trusting,  or  not  trusting,  Microsoft. 
It’s  about  eggs  and  baskets. 

It  was  a  software  bug  that  caused 
Microsoft  to  disable  the  e-wallet  part  of 
Passport.  A  bug  that  could,  at  least  in  the- 


Enterprise  Applications 


Juggling  eggs 


ory,  be  exploited  to  get  the  Passport 
servers  to  send  the  contents  of  some¬ 
one’s  e-wallet  to  someone  else.  Micro¬ 
soft  says  it  does  not  think  that  the  bug 
was  actually  exploited  to  expose  infor¬ 
mation  that  should  not  have  been 
exposed,  but  shut  down  the  service  — 
inconveniencing  its  2  million  or  so  users 
—  to  fix  the  bug. 

Passport  is  quite  a  success.  Of  course, 
some  of  the  success  comes  from  Micro¬ 
soft  requiring  computer  owners  to  enroll 
in  Passport  to  even  install  some  Microsoft 
software,  but  the  company  has  claimed 
that  as  many  as  200  million  people  have 
enrolled.  No  matter  how  you  cut  it,  that’s 
a  lot  of  people.  In  Microsoft’s  vision, 
Passport  will  make  it  easier  for  people  to 
be  identified  to  multiple  Web  sites. That’s 
a  feature  that,  to  me  at  least,  is  at  best  a 
mixed  blessing. 

The  vision  also  has  just  about  everyone 


on  the  Internet,  or  at  least  in  the  U.S.  and 
maybe  Europe,  within  the  Passport  em¬ 
brace.  Passport  is  an  almost  perfect 
example  of  the  kind  of  attractant  Larry 
Lessig  talks  about  in  his  book  Code.  Lessig 
followers  would  embrace  a  potentially 
threatening  system  if  it  offered  something 
that  the  user  wanted. 

But  Passport  is  a  perfect  example  of 
something  else.  It  is  an  example  of  a  vast 
number  of  people  and  systems  depen¬ 
dent  on  something  designed  and  run  by 
people.  If  a  bug  pops  up,  it  potentially 
could  affect  200  million  people. 

Or,  if  one  of  the  people  operating  Pass¬ 
port  is  bribed,  millions  of  people  sud¬ 
denly  become  vulnerable.  Passport  is  not 
alone  in  having  this  potential  impact;  see 
how  successful  the  various  e-mail-borne 
viruses  have  been  in  the  current  Outlook- 
rich  Internet  environment. 

From  many  points  of  view  it  makes 
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sense  to  standardize  on  one  vendors  sys¬ 
tems  and  applications.  Support  is  easier, 
and  with  scale  can  come  efficiency  and 
maybe  even  lower  costs.  But  dependence 
on  a  single  vendor  brings  the  same  kind 
of  threat  that  a  farmer  faces  if  he  plants 
all  his  fields  with  the  same  strain  of  corn. 
If  the  wrong  bug  comes  along,  everything 
can  be  lost. 

As  a  Mac  user,  I’m  doing  my  part  to  en¬ 
sure  some  genetic  diversity,  but  I  have  no 
idea  how  to  deal  with  the  trends  in  the 
real  world  other  than  pray  that  Microsoft 
only  employs  incorruptible  people  who 
write  perfect  code. 

Disclaimer:  Perfection  and  Harvard  are 
related,  at  least  in  Harvard’s  mind,  but 
the  above  lament  is  mine  alone. 

Bradner  is  a  consultant  with  Harvard  Uni¬ 
versity's  University  Information  Systems. 
He  can  be  reached  at  sob@sobco.com. 
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Hospital 

continued  from  page  25 

slow,  and  the  view  station  need¬ 
ed  to  be  recalibrated  monthly. 

Recently  the  hospital  brought 
in  iSite  Enterprise  from  San  Fran¬ 
cisco  company  Stentor  to  serve 
the  images  over  the  intranet. 

“We  give  [the  staff]  the  tools 
they  need  on  a  PC  instead  of 
making  them  come  to  the  radi¬ 
ology  reading  room  and  using 
the  $100,000  workstations  the 
radiologist  use,”  says  Leann 
Beird,  the  Picture  Archival  and 
Communication  Systems  (PACS) 
administrator  at  the  VA  hospital. 

Big  files 

Delivering  high-quality  X-rays 
over  an  intranet  is  a  challenge 
considering  a  single  CAT  scan 
“slice"  is  1M  byte  in  size,  and 
there  can  be  up  to  800  slices  in  a 
series.  Images  must  be  delivered 
in  full  fidelity  and  cannot  use 
compression  techniques  that  re¬ 
sult  in  any  type  of  image  quality 
degradation,  which  would  be 
bad  news  when  examining  a 
chest  scan  for  possible  tumors. 

To  solve  the  problem,  Stentor 
uses  wavelet  algorithms,  which 
reduce  an  image  into  layers  that 
are  delivered  as  needed  over  the 
network  without  the  need  for 
compression.  Only  the  part  of 
the  image  being  viewed  on 
screen  is  delivered. 

■\  t  i  a  clinician  is  looking  at 
.  '  -  t’s  like  reading  the 
'  r.  You  can  the  head¬ 

in'  1  .  n  -  ri!i  down  from  there 
to  z>’  ■  !'.t  on  an  article  to  read," 


Beird  says  of  the  wavelet  tech¬ 
nology.  “The  same  is  true  for 
medical  images.” 

In  July  2000,  Beird  replaced 
the  expensive  stations  with  Dell 
PCs  equipped  with  1600  Super¬ 
wide  SGI  flat  panel  monitors 
and  3D  Labs  Oxygen  graphics 
cards. 

“We  get  the  same  resolution  as 


the  $60,000  station  for  $1,500,” 
Beird  says. 

At  the  core  of  the  architecture 
is  PACS,  a  1 7-terabyte  StorageTek 
system  that  replaces  need  for 
hard  copies  of  X-rays.  The  hier¬ 
archical  storage  system  runs  on 
a  Sun  4500  Unix  box. 

When  a  patient  has  an  X-ray, 
CAT  scan  or  MRl,the  images  are 
delivered  first  to  the  PACS  sys¬ 
tem  for  storage.  From  there,  im¬ 
ages  are  sent  to  the  Stentor  iSite, 
a  Web  server  running  custom 
image  delivery  software. 

The  Stentor  server  runs  on  a 
Compaq  Proliant  dual-Xeon  pro¬ 
cessor  box  with  a  RAID  storage 
array  that  warehouses  about  six 
months’ worth  of  images.  Soon,  a 
1 -terabyte  RAID  array,  capable  of 
handling  a  year’s  worth  of  im¬ 
ages, will  be  installed, Beird  said. 

Images  for  inpatients  are  kept 
on  the  Stentor  box  the  longest, 


with  single  images  that  will  only 
be  used  once  dropped  first. 
Everything  is  stored  for  at  least 
five  years  on  the  PACS  and  can 
be  pushed  to  the  Stentor  server 
if  needed. 

Stentor  monitors  its  product 
externally,  making  sure  the  oper¬ 
ating  system  and  applications 
are  running  properly.  In  late  Oct¬ 


ober  it  helped  the  hospital  as  a 
construction  crew  accidentally 
cut  the  hospital’s  OC-12  connec¬ 
tion  to  the  outside  world,  and 
Stentor  was  the  first  to  notify 
Beird  that  something  was  wrong 
because  they  could  no  longer 
“see”  the  server. 

Solid  foundation 

The  VA  hospital’s  network 
infrastructure  includes  a  Giga¬ 
bit  Ethernet  backbone  con¬ 
nected  to  a  Cisco  6500  router 
with  single  strands  of  fiber  run¬ 
ning  to  network  closet  contain¬ 
ing  a  Cisco  3500  switch.  All 
clients  have  Fast  Ethernet  cards 
in  them. 

“We’ve  had  no  bandwidth 
issues,”  Beird  says,  adding  there 
could  be  200  to  300  people 
viewing  images  simultaneously. 

If  that  many  people  simulta¬ 
neously  tried  to  download  the 


full  image,  the  network  would 
slow  to  a  crawl. 

Users  can  access  the  Stentor 
server  directly  through  a  Web 
browser  (a  plug-in  is  down¬ 
loaded)  using  the  same  logons 
and  passwords  they  use  for  the 
network,  or  via  the  patient  rec¬ 
ord  system.  A  VA  programmer 
built  the  interface  to  the  med¬ 
ical  records  system.  Included 
with  the  image  is  the  radiology 
report,  a  text  document  ex¬ 
plaining  the  findings  of  the 
study. 

Images  also  are  accessible 
from  15  PCs  at  nearby  University 
of  Michigan,  which  lets  physi¬ 
cians  teaching  at  the  school  ac¬ 
cess  important  patient  data.  Ac¬ 
cess  can  also  be  granted  via  the 
national  Veteran  Administration 
Intranet.  A  logon  needs  to  be 
issued  to  those  on  the  national 
Intranet. 

Groups  such  as  the  Tumor 
Board  —  which  includes  phys¬ 
icians  from  different  depart¬ 
ments  who  review  cancer  pa¬ 
tients’  progress  and  prognosis 
—  use  the  imagine  technology 
in  their  reviews.  A  laptop  at¬ 
tached  to  a  high-resolution  pr¬ 
ojector  is  used  to  view  the 
information. 

Another  benefit  of  the  Web 
technology  is  that  it’s  easy  to 
learn.  Ann  Arbor  is  a  teaching 
facility,  with  staff  rotating  be¬ 
tween  the  hospital  and  univers¬ 
ity  classrooms  on  a  monthly 
basis. 

Beird  says  it’s  easier  to  teach 
users  the  Web  system  in  a  short 
period  of  time,  something  nec¬ 
essary  with  a  lot  of  staff 
turnover.  ■ 


Witness 

continued  from  page  25 

Fort  says  Saturn  plans  to  add  a 
Web  chat  component,  linking 
agents  to  site  visitors,  in  the  first 
half  of  next  year.  Self-service 
functionality  is  “something  we’ll 
look  at,”  he  says. 

Customers  often  call  in  with  a 
question  about  Saturn’s  online 
car-configuring  process,  for  ex¬ 
ample,  he  says.  EQuality  Dis¬ 
cover  could  help  pinpoint  the 
stumbling  blocks  that  prevent 
visitors  from  completing  the 
process. 

Available  later  this  month, 
eQuality  Discover  runs  on  Win¬ 
dows  NT  and  Solaris  and  sup¬ 
ports  Apache  and  Microsoft’s 
Internet  Information  Server  Web 
servers  and  .Oracle  databases. 
Pricing  starts  at  $65,000  for  one 
Web  site  address. 

Next  year,  Witness  plans  to  fill 
out  its  self-service  offering  with 
tools  to  monitor  other  auto¬ 
mated  systems,  including  tele¬ 
phone-based,  voice-recognition 
and  interactive  voice-response 
systems. 

Witness:  www.witness.com 


More  online! 


Read  about  self-service  software  from 
Jeeves  and  Motive,  and  check  out  an  online 
Flash  demo. 

DocFinder  6833 


fcfe  We  give  [the  staff]  the  tools  they  need  on  a 
PC  instead  of  making  them  come  to  the  radi¬ 
ology  reading  room  and  using  the  $100,000 
workstations  the  radiologists  use. 99 

Leann  Beird 

PACS  system  administrator,  Ann  Arbor  VA  Healthcare  System 
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100%  of  your  disk  capacity  is  now  usable 
for  storage.  We  call  this  revolutionary  idea 

getting  what  you  pay  for. 


THE  STRAIGHT  GOODS  ON  RESTRICTED  PROMOTIONS. 


Oracle  has  issued  a  bold  offer.  They'l 
give  a  million  dollars  to  any  DB2, 
WebLogie  or  SQL  Server  user  who 
switches  to  Oracle  technology  and 
fails  to  triple  the  performance  of 
their  website.  Pretty  impressive  talk. 

Some  say  Oracle  is  putting  their 
money  where  their  mouth  is.  But 
for  Sybase  users,  it's 
pure  silence. 

For  that,  we  apologize. 

But  we  wonder.  Why 
are  Sybase  users 
exempt  from  this 
extraordinary  piece 
of  generosity? 

To  begin  with,  our 
tests  show  that  Sybase 
Enterprise  Application 
Server  (EAServer) 
is  right  there  with 
Oracle,  performing  as 
fast  and  sometimes 
faster  than  some  of 
our  competition. 

EAServer  4.0  has 
what  it  takes  to 
manage  millions  of 
transactions  a  day 
and  the  scalability 
to  reliably  support 
thousands  upon 
thousands  of 
concurrent  users. 

Big  deal,  you  say. 

That's  the  cost  of  entry  for  an  app 
server.  We  think  not. 

The  real  cost  of  entry  is  what  happens 
when  your  app  server  enters  your 
environment. 

Will  your  app  server  leverage  your 
existing  investments?  Or  will  it 
strangle  your  IT  department  for  a 


couple  of  months  in  a  slow  and  very 
painful  integration  process? 

In  reality,  that's  where  all  the  really 
substantial  costs  are  hidden. 

And  it's  here  where  EAServer  really 
leaves  the  competition  whimpering. 
EAServer  is  the  most  open  application 


server  available  on  the  planet.  It’s 
J2EE  certified.  It  supports  C,  C++, 
CORBA,  COM  and 
PowerBuilder,  as  well 
as  virtually  every 
switch,  server  and 
legacy  system 
known  to  IT.  It 
also  allows  for 
complete  integration 


SYBASE  e-BUSINESS  SOFTWARE 
BECAUSE  EVERYTHING  WORKS  BETTER  WHEN 


with  any  back-end  database  using 
JDBC  or  ODBC  databases. 

Just  run  those  specs  up  against  the 
competitors. 

Naturally,  it  also  has  enterprise-class 
security.  The  kind  of  security  you  can 
bet  a  couple  of  million  credit  card 
numbers  on. 


And  last  but  not  least, 
EAServer  provides  you 
with  a  wicked  fast  and 
intuitive  development 
environment  that  will 
amaze  your  friends  and 
delight  your  superiors 
as  you  get  your  stuff 
out  to  the  market  really, 
really  fast. 

So  there  you  have  it. 

We  think  perhaps  now 
you  have  a  much  better 
understanding  of  why 
all  Sybase  users  were 
excluded  from  the  very 
famous  Oracle  lottery. 

Indeed,  we're  sorry  our 
technology  does  make 
you  ineligible  for  those 
Oracle  millions.  But 
look  on  the  bright  side: 
With  EAServer,  you 
can  help  your  business 
earn  some  millions  of 
its  very  own. 


For  more  information  on  how  you 
can  get  a  great  application  server, 
if  not  a  million  bucks,  visit 
www.sybase.com/customers 
or  call  1-800-8-SYBASE. 
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EVERYTHING  WORKS  TOGETHER 


www.nwfusion.com 


SPECIAL  REPORT:  THE  NEW  TELEWORK 


■  PRODUCTS,  SERVICES  AND  STRATEGIES 
FOR  TYING  TELEWORKERS  TO  THE  ENTERPRISE 


Sept.  11  changed  everything  —  including  telework.  Formerly  viewed  as  a  way  to  boost  morale  and 
productivity,  lure  the  best  hires  and  cut  costs,  telework  was  almost  instantly  transformed  into  a  vital 
component  of  U.S.  business  continuity  strategies  —  a  way  to  ensure  facilities  stay  open  and  workers 
stay  safe  in  case  of  disaster  or  attack.  More  online  at  www.nwfusion.com,  DocFinder  6841. 


Rethinking  where  people  work 

Attitudes  toward  telework  shift  dramatically  since  the  terrorist  attacks. 


■  BY  TONI  KISTNER 

The  number  of  teleworkers  in  the  U.S.  has 
never  been  higher  —  28.8  million  accord¬ 
ing  to  recent  research  by  the  International 
Telework  Association  and  Council.  Even 
so,  for  advocates  who  routinely  rattle  off  a 
dozen  benefits  of  telework,  widespread 
telework  adoption  has  been  frustratingly 
slow,  marked  most  by  resistance  from  mid¬ 
dle  management. 

As  a  result,  many  companies  dabble  in 
telework  in  one  way  or  another  as  part  of 
employee-friendly  philosophies  or  cost-cut¬ 


ting  measures  —  launching  pilot  pro¬ 
grams,  letting  far-flung  new  hires  work  from 
home  or  simply  equipping  workers  with 
the  tools  to  work  from  anywhere.  Grander 
plans  to  distribute  the  workforce  haven’t 
topped  many  lists.  But  now  that’s  changing. 

In  the  aftermath  of  the  Sept.  1 1  attacks,  the 
list  of  telework  benefits  has  grown  longer, 
and  the  new  items  seem  much  more 
important.  The  old  way  and  the  old  resis¬ 
tance  suddenly  seemed  irrelevant  as  tele¬ 
work  was  immediately  recognized  as  the 
single  best  way  for  companies  formerly 
housed  in  the  World  Trade  Center  complex 


and  nearby  buildings  to  resume  some  sem¬ 
blance  of  normal  operations. 

As  important,  telework  became  the 
compassionate  response  to  the  thousands 
of  employees  who  were  injured  and/or 
emotionally  traumatized  —  a  way  to  help 
them  ease  back  into  work  on  their  own 
terms,  in  secure  surroundings.  Moreover, 
telework  became  a  way  to  spare  long 
commutes  to  temporary  offices  in  the  sub¬ 
urbs  for  those  in  better  shape. 

For  the  short  term,  telework  has  been  the 
best  answer  to  the  question, “Where  do  we 
work?”  Long  term,  it  becomes  a  vital  part 


of  a  larger  contingency  plan  should  the 
worst  happen  again. 

On  the  front  lines  of  this  changing  atti¬ 
tude  are  telework  consultants  and  technol¬ 
ogy  providers.  Here’s  what  people  are 
reporting: 

•  “Companies  aren’t  concerned  about 
training  or  what  the  optimal  program 
should  be. They’re  just  trying  to  get  to  sta¬ 
bilization  so  workers  can  access  files  from 
home  and  be  productive,"  says  Tim  Kane, 
president  of  ITAC,  and  CEO  and  president 
of  telework  consultancy  Kinetic  Work¬ 
place.  “Everybody  looking  at  this  realizes 
telework  is  a  big  project.They’re  launching 
short-term  solutions  today  then  in  a  quarter 
or  two  they  may  say, ‘Hey  this  is  really  work¬ 
ing  for  us,’  and  roll  out  something  more 
permanent.” 

See  Teleworking,  page  34 


Turning  to  telework 

Home  offices  emerge  as  a  critical  part  of  three  firms'  business-continuity  strategies. 


■  BY  JEFF  ZBAR 

Merrill  Lynch 

On  the  morning  of  Sept.  1 1 ,  Michelle  Bernal  was  about  to 
board  the  ferry  for  lower  Manhattan  when  she  saw  smoke 
billowing  from  the  Twin  Towers. 

She  didn’t  board  the  ferry. 

“I  decided  it  wouldn’t  be  a  good  day  to  go  in  to  work,” 


says  Bernal,  the  assistant  vice  president  of  global  recruit¬ 
ment  strategies  at  Merrill  Lynch. 

While  she  hasn’t  since  been  back  to  Manhattan,  having 
lost  her  office  —  along  with  9,000  other  company  employ¬ 
ees  at  World  Financial  Center  and  other  locations  in  lower 
Manhattan  —  Bernal  was  back  to  work  within  a  week  as  a 
teleworker. 

She  and  her  manager  formulated  an  impromptu  work 

arrangement  in  which 
Bernal  splits  her  time 
between  her  home  office  in 
Mineola,  N.Y,  and  the  com¬ 
pany’s  Somerset,  N.J.,  office. 
Until  her  company-issued 
laptop  arrives,  she’s  using 
her  own  PC  and  at  last 
check  was  waiting  for 
Verizon  to  install  her  sec¬ 
ond  phone  line. 

Although  Merrill  Lynch 
corporate  e-mail  servers 
were  down  in  the  days  fol¬ 
lowing  the  attacks,  Bernal 
could  correspond  with  co¬ 
workers  via  her  cell  phone 
and  personal  Hotmail  ac¬ 
count.  If  she  couldn’t 
access  documents,  she 
worked  with  team  mem- 


Since  the  terrorist  attacks,  Merrill  Lunch's  Michelle  Bernal 
alternates  days  working  from  home  and  commuting  70  miles 
each  way  to  Merrill's  offices  in  Somerset,  N.J. 


bers  to  rebuild  ongoing  projects  from  documents  co¬ 
workers  had  stored  on  their  laptops. 

These  days,  she  shuttles  between  the  Somerset  office 
and  a  desk  perched  in  an  alcove  in  her  home.  Her 
Somerset  days  are  long  and  involve  a  strenuous,  70-mile 
traffic-jammed  commute  both  ways.  In  contrast,  her  home 
office“casts  a  calming  influence.”She  says  she  can  balance 

See  Companies,  page  32 


Short 

Takes 


■  Alternative  office  space  provider  HQ 
Global  Workplaces  announced  it 
would  begin  offering  three-dimensional 
videoconferencing  service  in  its  New 
York,  Dallas  and  San  Francisco  busi¬ 
ness  centers.  Developed  by  Dallas 
firm  Teleportec,  the  technology  lets 
meeting  attendees  view  full-sized  3-D 
images  of  each  other,  which  the  com¬ 
pany  claims  transmits  the  nuances  of 
human  communication  such  as  eye 


contact  and  body  language.  Sessions 
cost  from  $200-300  per  hour,  www.hg 
.com;  www.teleportec.com 

■  Toshiba  recently  announced  the 
release  of  its  first  voice-over-IP- 
enabled  cable  modem.  The  PCX3000 
includes  dual  ports  for  telephone  con¬ 
nectivity  and  Universal  Serial  Bus  and 
Ethernet  ports  for  data.  Initially,  the 
modem  is  being  used  in  telephony  ser¬ 
vices  trials  with  cable  operators. 
Toshiba  says  the  modem  will  be  avail¬ 
able  early  next  year  to  service 
providers,  then  sold  in  retail  stores. 
www.toshibamodems.com 


fcl  People  are  questioning  why  they  commute  -  and  why  they  work  so  far  from  home.  Cynthia  Froggatt  virtual  workplace  consultant,  author 


STEVEN  VOTE 


have  yet  to  fade  when  reality  starts  to  sink  in:  The  deal  has  just  been  inked,  but  success  now  depends 

on  your  ability  to  figure  out  how  to  combine  environments,  integrate  old 
systems  with  new  ones,  make  disparate  hardware  and  software  work 
together.  And  while  you're  at  it,  make  sure  the  whole  infrastructure  stays 
up  and  running. 

One  thing's  for  certain,  though.  You  can't  just  throw  more  money  at 
the  problem.  In  today's  marketplace,  you  have  to  throw  more  intelligence 
at  it.  And  that  means  finding  someone  to  work  with  you  who  understands 
that  the  problem  you're  facing  comes  with  its  own  unique  set  of  timing,  budget 
and  technology  constraints. 

To  that  end,  we  offer  up  the  breadth  of  experience  that  comes  with 
HP  Services:  30,000  professionals  in  120  countries  who  prefer  to  solve 
problems  more  with  their  heads  than  just  with  a  purchase  order.  Solutions 
based  on  your  particular  business  needs  — whether  they  require  consulting, 
financing,  education,  support  or  even  total  outsourcing  expertise. 

We've  helped  thousands  of  businesses  with  virtually  every  aspect 
of  their  IT  environments.  From  designing  and  maintaining  powerful,  always-on 
infrastructures  to  implementing  smoother,  large-scale  systems  migrations  and 
integrations  to  supporting  multi-vendor  environments.  All  without  forcing 
them  into  restrictive  niches  or  long,  expensive  engagement  cycles. 

HP  infrastructure  solutions  — servers,  software,  storage,  services  and 
beyond  — are  engineered  for  the  real  world  of  business.  Because  the  last  time 
we  checked,  that's  where  we  all  work.  Call  1.800.HPASKME,  ext.  246.  Or  visit 
hp.com/go/infrastructure. 

Infrastructure:  it  starts  with  you. 


i  n 


NetWorker  SPECIAL  REPORT:  THE  NEW  TELEWORK 


More  online  at  www.nwfusion.com,  DocFinder:  6841. 
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Ten  tips  to  telework 


Whether  workers  are  sent  home  formally  or  on  the  fly,  follow  these  guidelines  to  ensure  their  success. 


■  BY  JEFFZBAR 

For  some,  Sept.  1 1  changed 
everything  in  the  workplace. 

And  for  others,  it  changed  very 
little. 

Some  companies  have 
known  for  years  that  tele¬ 
work  is  an  effective  trump 
card  against  natural  disas¬ 
ters  or  other  calamities  —  a 
way  to  keep  workers  working 
But  these  days,  everybody’s  get¬ 
ting  it.  Even  so,  don’t  wait  for  a 
calamity  to  create  a  telework 
program:  We  found  that  compa¬ 
nies  with  some  previous  tele¬ 
work  experience  were  quicker  to 
find  ways  to  get  their  employees 
working  again  —  whether  at 
home  or  some  shared 
space  —  in  the  weeks  fol¬ 
lowing  the  terrorist  attacks. 

While  you'll  find  a  wealth 
of  advice  from  us  and  others  on 
how  to  launch  a  formal  remote 
work  program,  much  of  it 
assumes  you’ve  got  several 
months  with  which  to  work. 
Instead,  we’ve  pulled  together  10 
essential  tips  that  could  have 
your  employees  teleworking  in 
weeks,  if  not  days. 


1 


■  Make  your  first 
call  to  IT.  Computer,  net¬ 
work  and  telephone  sys¬ 
tems  work  in  concert  to 
make  remote  officing  work.  From 
IT  and  computer  and  software 


procurement,  to  cellular, 
local,  broadband  and 
long-distance  telephone 
providers,  the  sooner  IT  knows 
what  remote  workers  need,  the 
sooner  it  can  get  them  up  and 
running. 

2a  List  your  re- 

sources.  If  the  company 
has  never  instituted  a  for¬ 
mal  telework  program, 
spend  time  listing  some  of  the 
resources  —  telework  consul¬ 
tants,  Web  sites,  even  internal 
employees  and  managers 
familiar  with  telework  best  prac¬ 
tices  —  who  can  be  turned  to 
provide  the  critical  insights 
needed. 

3a  Be  flexible  in 

space  selection.  In  ideal 
circumstances,  workers 
have  the  time  to  plan 
and  equip  a  home  office.  In 
a  bind,  that  time,  let  alone 
an  appropriate  workspace, 
might  not  be  available.  In  a 
pinch,  combine  remote  and 
alternative  officing  strategies. 
Call  on  strategic  partners  who 
might  have  space  available 
to  sublet,  and  find  resources 
and  allies  with  space  to  spare. 
Long-term  solutions  will  come 
eventually,  but  being  creative 
at  the  outset  can  go  a  long 
way  in  getting  your  business 
back  to  normal. 


4a  Know  the 

organizational 
Chart  By  knowing 
the  intricacies  of  your 
company’s  workers,  teams, 
departments  and  critical  adja¬ 
cencies,  managers  can  help  facil¬ 
ities  and  human  resources  col¬ 
leagues  place  workers  in  appro¬ 
priate  settings  —  whether  it’s  a 
shared  space  or  home 
office. 


people. 

only  top 


Pick  the  right 

If  possible,  put 
performers  in 


home  offices  —  those  who  work 
well  with  the  team  or  alone,  con¬ 
sistently  meet  their  deadlines 
and  are  easily  managed  from 
near  or  far.  If  this  isn’t  an  option, 
make  sure  team  members  are 
monitored  closely  to  ensure 
they’re  performing  to 
expectations. 

6  b  Forget  the  pol¬ 
ish.  Under  ideal  cir¬ 
cumstances,  a  telework 
pilot  program  is  afforded 
time  for  thoughtful  planning, 
testing  and  rollout.  During  a  cri¬ 
sis,  some  of  the  planning  can 
give  way  to  get  workers  back  to 
work.  Productivity  and  perfor¬ 
mance  reviews  can  be  acceler¬ 
ated  or  held  more  frequently  to 
ensure  new  teleworkers  are 
meeting  their  deliverables  and 


working  well  remotely. 

7.  Identify  the  best 

place  workspace. 

Once  you’ve  estab¬ 
lished  who  will  work 
from  home,  help  them  pick 
the  most  appropriate  spot. 

The  ideal  place  for  a  home 
office  is  in  a  dedicated  room 
with  a  door.  In  a  pinch, any  quiet 
space  secluded  from  the  bustle 
of  home  life  will  do.  At  mini¬ 
mum,  ensure  there’s  a  desk,  com¬ 
puter,  ergonomic  chair,  proper 
lighting,  an  Internet  connection 
(preferably  high-speed)  and  a 
business  phone  line.  In  the  days 
after  the  attacks,  many  resource¬ 
ful  teleworkers  used  their  cell 
phones  for  business  and  their 
home  phone  lines  for 
Web  access. 

8a  Keep  team 
spirit  alive.  Realize 
that  remoteness  is  a  state 
of  mind.  Whether  they’re  down 
the  hall  or  across  the  country, 
workers  rely  on 

e-mail,  instant  messaging  and  the 
phone  to  connect.  Even  so, 
expect  the  sudden  loss  of  physi¬ 
cal  contact  and  water  cooler 
banter  to  exacerbate  feelings  of 
isolation.  One  way  to  maintain 
contact  with  the  team  is  for 
members  to  start  each  day  by 
sending  an  “I’m  open  for  busi¬ 
ness”  e-mail  that  includes  the 


day’s  schedule  and  tasks  to  be 
accomplished.  Make  time  for 
friendly  chatter,  so  long  as  it 
doesn’t  interrupt  workflow. 


0 


9. 
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Exchange  per¬ 
sonal  information.  A 

good  practice  in  the 
best  and  worst  of  times:  If 
the  network  goes  down,  private 
e-mail  and  cell,  personal  and 
home-office  telephone  num¬ 
bers  can  be  invaluable  for  get¬ 
ting  people  back  in  touch.  If 
appropriate,  create  and  main¬ 
tain  a  company  site  where  peo¬ 
ple  can  exchange  such  infor¬ 
mation.  Many  first-time  tele¬ 
workers  reported  that  the  lack 
of  access  to  colleagues’  person¬ 
al  information  hampered 
recovery  efforts. 

10  a  Reach  out 
and  communicate. 

Disaster  response  re¬ 
quires  corporate  leadership 
and  a  support  network  to  calm 
employees  and  answer  ques¬ 
tions.  “Reach  out  as  proactively 
as  you  can,"  recommends  Julie 
Gerdeman,  a  vice  president 
of  account  development  in 
American  Express’  corporate 
services  group.  “Overcommun¬ 
ication  makes  people  know 
we’re  there,  and  they  have 
the  information  they  need 
to  succeed  in  this  new 
environment.”  ■ 


fc  fc  Now,  we  never  really  know  whether  we  re  reacting  in  a  way  that  helps  protect  us  from  future  attacks.  9  9  Tim  Kane  ITAC  president 
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her  job  with  her  personal  needs, 
work  out  and  eat  home-cooked 
meals  more  often,  and  generally 
live  a  healthier  lifestyle. 

Yet,  in  looking  to  the 
future,  Bernal  is 


teleworking:' 

1,800 

in  New  York 
metropolitan 
area 


realistic. 


She 


knows  when  Merrill  Lynch  even¬ 
tually  reopens  its  World 
Financial  Center  headquarters, 
she’ll  be  asked  to  resume  her  old 
70-minute  commute  by  train. 
Even  so,  Bernal  says  Merrill 
Lynch  seems  willing  to  explore 
permanent  part-time  arrange¬ 
ments  with  workers  who  were 
dislocated  by  the  attacks, 


PROFILE:  MERRILL  LYNCH 


World  Financial  Center,  New  York 
$26.78  billion  (2000) 

65,900  (Q3  2001) 


Headquarters 
Annual  revenue 
Nttrr.oer  of  employees 
worldwide 

Number  of  employees  9,000  from  the  World  Financial  Center 
dislocated  and  surrounding  areas 


adding,  “1  like  working  from 
home.  It’s  just  like  being  at  work.” 

Sun 

Before  the  terrorist  attacks,  Sun 
was  knee-deep  in  implementing 
i Work,  a  formal  telework  program 
that  relies  on  a  combination  of 
home  offices,  drop-in  centers  and 
flexible  space  in  the  company’s 
New  York-area  offices.  Sun  had 
hoped  to  send  as  many  as  5,000 
workers  worldwide  home  by  year- 
end. 

Instead,  the  loss  of  two  floors  of 
World  Trade  Center  office  space 
forced  Sun  to  find  alternative 
offices  for  800  workers  practically 
overnight. 

“This  wasn’t  the  way  we’d  hoped 
to  accomplish  our  goal,”  says 
Cathy  Guilbeault, Sun’s  director  of 


workplace  resources. 

Sun  acted  quickly  First,  it  sus¬ 
pended  registration  for  the  iWork 
program,  letting  the  New  York 


■  PROFILE:  SUN 


Headquarters:  Palo  Alto 

Annual  revenue:  $18.25 
billion  (2000) 

Number  of  employees 
worldwide:  43,000 


staffers  —  most  of  whom  were 
technical  support  and  sales  rep¬ 
resentatives  —  sidestep  a  lengthy 
approval  process.  Next,  Sun 
shipped  out  200  laptops  with  the 
iWork  CD-ROM  loaded  with 
Netscape  Navigator,  antivirus  soft¬ 
ware  and  Sun’s  StarOffice  office 
suite.  Workers  were  given  net¬ 
work  access,  call  forwarding  and 
faxing  capabilities  from  their 
original  office  extensions,  and 
offered  remote  work  and  man¬ 
agement  training. 

“To  get  the  flexibility  we  need¬ 
ed,  we  opened  up  the  tele¬ 
work  option  to  everyone 
affected,”  Guilbeault  says. 
That  way,  those  who  want¬ 
ed  to  jump  right  back  into 
work  had  a  phone  and  a 
See  Companies,  page  34 


Number  of  employees 
dislocated:  800 

Note:  Sun  lost 
89,162  square 
feet  of  office 
space  in  the 
WTC. 


r  Total  , 

teleworking: 
290 

in  NewYork 
metropolitan 
area 


NetWorker  SPECIAL  REPORT:  THE  NEW  TELEWORK 


More  online  at  www.nwfusion.com,  DocFinder:  6841. 
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•  Karen  Dmytriw,  director  of  converged  applications  at 
Verizon  Enterprise  Solutions  Group, says  her  customers  are 
now  putting  formal  telework  programs  in  place  as  a  con¬ 
tingency  plan.  “They’re  looking  to  answer  two  questions: 
‘How  do  1  make  my  employees  happy,  comfortable,  and 
feel  secure,’  and, ‘If  something  happens, do  we  have  a  good 
backup?’ " 

•Consultant  Gil  Gordon  says  one  financial  services  client 
illustrated  the  new  attitude  best:  “We  used  to  have  a  hard 
time  getting  the  attention  of  senior  management  on  tele¬ 
work  and  other  forms  of  office  decentralization.  Now 
they’re  coming  to  us  and  asking,  ‘Hey  what’s  this  stuff  all 
about?’  ” 

Gordon  adds  that  for  many  tech-sawy  companies  that 
are  already  equipped  with  remote  access  and  mobile 
technology,  the  attitude  is  to  just  do  it.  “There’s  less  need 
for  wholesale  orientation  and  education.  Even  so,  the 
staunch  resistance  to  telework  hasn’t  been  washed  away 
overnight,”  he  says. 

•  Mark  Googins.vice  president  of  consulting  services  for 
network  integrator  Calence,  says, “Our  clients  now  recog¬ 
nize  they  have  to  be  prepared  for  any  event.  What  is  their 
work-at-home  policy,  disaster-recovery  plan?  The  bigger 
companies  still  see  telework  more  as  an  opportunity  to 
cut  costs.” 

He  adds, “While  many  of  our  clients  have  had  telework 
programs  in  place, they  may  not  have  been  well  defined  in 
terms  of  who’s  eligible.  Companies  are  now  focusing  on 
these  programs,  defining  and  communicating  them  better, 
and  getting  more  people  involved.” 

•  “One  company  I  met  with  in  New  York  that  lost  their 
space  was  the  anomaly,”  Kane  of  ITAC  says.  “They  have  a 
younger  population  who  generally  live  on  their  own. Senior 
management  views  telework  as  the  worst  possible  thing 
they  could  do  right  now  for  the  employees.  They  get  their 
emotional  support  from  the  office.  Prior  to  9/1 1  these  folks 
would  have  loved  the  flexibility  to  work  at  home  a  couple 
days  per  week.  But  now  they  need  to  be  together? 

•  Joseph  Villarosa,  a  small-business  strategic  analyst  and 
former  epidemiologist,  says, “Things  were  quiet  at  first,  but 
now  the  phone  is  ringing  off  the  hook.  Companies  have 


realized  that  they  still  need  to  do  business,  sell  product, 
regroup,  find  new  ways  of  selling  stuff,  restrategize  —  but  all 
under  a  new  set  of  conditions.” 

•  “We’ve  finally  broken  through  to  say  that  telework  is 
work  from  anywhere,”  says  John  Vivadelli,  president  of 
enterprise  software  company  AgilQuest.  “But  anywhere 


has  to  be  a  real  place.  Offices  aren’t  going  anywhere. 
They’re  going  to  be  used  differently,  and  the  networker 
needs  to  be  mobile  —  in  hotels,  taxis  and  rental  cars. 
People  can’t  get  all  their  work  done  from  one  place,  I 
don’t  care  where  it  is  —  home, downtown,  wherever.That’s 
why  there  are  networks."  ■ 


Tim  Kane 
on  telework 


In  eight  years,  Tim  Kane  grew 
his  Pittsburgh  start-up  Kinetic 
Workplace  into  a  leading 
telework  consultancy.  ITAC’s 
newly  elected  president,  Kane 
recently  spoke  with 
Net.  Worker  Managing  Editor 
Toni  Kistner  about  telework ’s 
expanded  role  since  Sept.  1 1. 


lot  of  people  have  foregone  ROI  and  timing. They’re 
just  saying, ‘Hey  we  better  invest  in  this.’ We’re  trying 
to  sell  a  very  emotional  decision. 


“9/11  is  a  heck  of  a  power¬ 
ful  driver.  You  just  can't 
equate  dollars  and  cents 
with  it,”  Kane  said. 


Is  the  change  being  driven  by  employees  or 
by  management? 

Both.  On  a  recent  trip  to  New  York,  1 
met  with  a  handful  of  businesses  execu¬ 
tives  and  federal  agency  officials.  All  said 
they  can’t  afford  to  not  be  compassion¬ 
ate.  Federal  workers  throughout  the  U.S. 
feel  anxiety  every  time  they  have  to 
enter  one  of  those  buildings.  In  New 
York,  some  workers  are  debilitated  and 
have  severe  panic  attacks  going  into  tall 
buildings.  What’s  making  it  worse  is  that 
any  time  you  enter  a  tall  building  these 
days  you  have  to  deal  with  increased 
security;  guards  search  your  bag  and  you 
feel  like  you’re  in  a  state  of  martial  law. 


How  has  your  business  changed  since  the  attacks? 

Sept.  1 1  has  created  a  new  market  driver,  but  one 
that’s  hard  to  get  your  arms  around.  Before,  I  could 
provide  metrics  for  each  of  the  telework  benefits:  I 
could  show  companies  how  the  more  tenured 
employee  is  a  better  employee  and  better  able  to 
serve  customers;  how  not  leasing  real  estate  can  save 
you  so  many  dollars  per  month.  But  there  isn’t  a  spe¬ 
cific  set  of  benefits  that  come  from  distributing  your 
workforce.  You  can’t  quantify  the  benefits  or  neces¬ 
sarily  time  them.  Security-driven  projects  don’t  pro¬ 
vide  a  quantifiable  return  on  investment.  Even  so,  a 


What  will  companies  do  in  the  long  term? 

They’re  looking  at  strategies  to  ensure  that  nothing 
like  this  can  ever  debilitate  our  organizations  again, 
ways  to  build  more  redundancy  into  the  system.  We’ll 
see  an  interesting  move  to  general  worker  mobility.  And 
in  major  cities,  where  companies  routinely  leased 
space  in  million  square-foot  office  towers,  you’ll  see 
them  instead  leasing  in  several  smaller  sites  with  a  lot 
more  mobility  between  them,  and  using  the  home 
office.  Not  just  in  New  York,  but  all  over:  As  leases  come 
up  for  renewal  in  Chicago,  companies  will  ask  them¬ 
selves,  ‘Do  we  want  to  put  every  single  worker  in  the 
Sears  Tower?’  ■ 


fc  fc  Sept.  11  was  a  huge  wake-up  call  to  reexamine ...  our  assumptions  about  offices  and  office  work.  99 

Gil  Gordon  telework  consultant  and  author 
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system.  And  those  who  needed 
more  time  knew  the  tools  were 
there  when  they  were  ready  to 
come  back  to  work. 

“To  us,  it  was  all  about  provid¬ 
ing  the  technology  they  need  to 
work  —  whether  it’s  from 
home,  a  Sun  site  or  customer 
location," she  says. 

While  it’s  too  soon  to  say  how 
many  new  teleworkers  will 
choose  to  return  to  traditional 
offices,  the  sense  is  most  who 
chose  iWork  will  stick  with  it.  In 
retrospect  Guilbeault  is  grateful 
so  many  of  the  dislocated  work¬ 
ers  opted  to  telework.  With  nearly 
half  its  NewYork-area  office  space 
lost,  she  doesn't  know  where  Sun 


would  have  put  them  all. 

American  Express 

While  many  companies  affect¬ 
ed  by  the  attacks  give  telework 
full  credit  for  helping  them  get 
back  to  business,  some  are  a  lit¬ 
tle  uneasy  with  the 
long-term  effects 
of  a  distributed 


Total 

teleworking:) 

800 


workforce. 

Take  American  Express.  It  has 
a  long-standing  telework  pro¬ 
gram  and  relied  on  the  practice 
to  facilitate  disaster  recovery. 
But  as  a  result  of  events,  the 
company  says  it  finds  itself 
alarmingly  dispersed  —  with 
employees  scattered  across  half 
a  dozen  corporate  locations 


full  time 

Headquarters 
Annual  revenue 

Number  of  employees 
worldwide 

Number  of  employees 
dislocated 


PROFILE:  AMERICAN  EXPRESS 


World  Financial  Center,  New  York 
$22.1  billion  (2000) 

85,000 


3,000  from  the  World  Financial  Center 


and  hundreds  of  homes. 

While  Julie  Gerdeman's  offices 
at  40  Wall  St.  were  not  damaged 
by  the  attacks,  American  Express 
relocated  her  30-person  depart¬ 
ment  to  home  offices  to  make 
room  for  some  of  the  3,000  dislo¬ 
cated  employees. 

“Everybody  got  reconfigured,” 
says  Gerdeman,  a  vice  president 
of  account  development  with 
the  group.  Because  Gerdeman’s 
group  provides  corporate  rela¬ 
tionship  services  and  expense 
management  support  for  clients 
in  New  York,  “it  was  a  natural 
migration  to  have  us  working 
from  home,”  she  says. 

But  for  how  long? 

“In  the  immediate  aftermath,  we 
focused  on  getting  all  those  em¬ 
ployees  back  doing  their  jobs  day 


to  day’  says  Tony  Mitchell,  vice 
president  of  public  affairs  and 
communications.“But  now  there’s 
a  larger  question.  Can  all  these 
folks  can  work  effectively  and  do 
the  company’s  business  this  way? 
It’s  a  challenge  to  figure  out 
where  we  all  are  going  to  be  on  a 
permanent  basis.”  ■ 

More  online! 

Read  how  to  create  and 
maintain  the  bes 
home-office 
environment.  * 
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FAILURE  IS  NOT  AN  OPTION 

LOOK  FOR 
THE  DLTtape'  LOGO. 


For  more  than  a  decade,  DLTtape™  technology 
has  been  known  for  its  unparalleled  reliability 
in  data  protection  and  retrieval.  In  fact, 
DLTtape  cartridges  must  pass  a  stringent 
process  to  become 
fully  qualified  and 
display  the 
DLTtape  logo. 

That’s  why  you’ll 
always  want  to  look  for 
the  DLTtape  logo  when  buying 
DLTtape  products.  It  ensures  that  your 
company’s  mission-critical  data  is  trusted 
to  quality  media  that  has  met  the  highest 
standards  for  reliability,  compatibility 
and  performance.  You’re  also  guaranteed 


to  be  getting  the  de  facto  standard  for  data 
backup  and  retrieval.  Products  that  do  not 
have  the  DLTtape  logo  have  not  met  these 
stringent  qualification  standards. 

So,  be 
sure  to  use 
cartridges 
that  carry  the 
DLTtape  logo. 
It  gives  you 
the  confidence  of  knowing  you’ve  purchased 
the  ultra-reliable  backup  solution  that’s 
chosen  5:1  by  IS/IT  managers.  To  find  out 
how  the  DLTtape  logo  has  become  the 
ultimate  symbol  of  quality  and  reliability, 
go  to  www.dlttape.com/qualified. 
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OPTIMIZE 

The  Value  of  Content 

FOR  MOBILE  USERS 


WHAT  IS  THE  VALUE  of  business-critical  content  if  users 
can’t  access  it  when  they  want  it  and  how  they  want  it — that 
is,  with  their  choice  of  devices?  The  answer  of  course,  is: 
Not  much,  no  matter  how  good  the  content  is. 

This  is  a  conundrum  faced  by  many  mobile  professionals. 
They  are  well  armed,  with  an  array  of  IP  phones,  palm  devices, 

pocket  PCs,  wireless  phones,  and  so  on.  But  getting  corporate  and  Internet 
information  to  these  devices  has  been  difficult  at  best,  not  to  mention  costly 
and  cumbersome. 

But  all  that  has  changed,  and  mobile  productivity  may  well  jump  an  order  of 
magnitude  as  a  result. 

WIRELESS  WONDER 

The  Cisco  CTE  1400  Series  Content  Transformation  Engine  (CTE)  seamlessly 
and  transparently  transforms  existing  enterprise  content  for  display  on  virtually 
any  mobile  wireless  device  that  has  a  screen  and  browsing  capabilities.  Plugged 
into  the  network  in  front  of  the  content  servers,  the  CTE  can  transform  content 
uniquely  for  each  device  in  the  field — as  well  as  for  the  Cisco  IP  Phone — and 
send  that  content  over  the  network  to  the  proper  device. 

With  the  CTE  acting  as  a  sort  of  universal  “decoder  ring”  between  the  users 
and  the  content  they  need,  revenue-enhancing  possibilities  abound.  For  exam¬ 
ple,  salespeople  will  be  able  to 
deliver  immediate  customer 
gratification  by  accessing  and 
delivering  vital  information  on 
product  pricing,  availability, 
shipping,  and  support  right  on 
the  spot.  This  kind  of  fast  service 
can  translate  into  greater  cus¬ 
tomer  retention  and  improved 
sales  closings. 

Senior  executives  who  typically 
spend  half  or  more  of  their  time 
away  from  the  central  office  will  find  that  their  mobile  devices  can  easily  request 
and  then  display  corporate  directories  and  calendars,  real-time  financial 
updates,  and  general  intranet  access. 

For  field  service  and  support  staff,  the  CTE  will  offer  reliable  wireless  access 
to  case  queries,  customer  updates,  and  technical  information. 

“The  bottom  line  for  the  enterprise  is  that  the  CTE  can  make  the  company  run 
more  efficiently,  and  improved  efficiency  is  the  key  to  survival  today,”  notes  Seth 
Redmore,  product-marketing  manager  at  Cisco  Systems.  “The  CTE’s  ease  of  use 
and  simple  installation  and  setup  also  make  for  lower  total  cost  of  ownership 
and  a  higher  return  on  investment.  We  make  it  easy  for  users  to  display  the 
information  they  need,  and  when  technology  is  easy  to  use,  we  find,  it  becomes 
very  popular." 

In  other  words,  when  an  organization  provides  mobile  workers  with  valuable 
content  on  a  small  screen  via  a  reliable  connection,  what  the  organization  is 
really  delivering  is  a  competitive  advantage. 

For  the  IT  professionals  that  support  the  mobile  workforce,  the  Cisco  CTE  is  a 
truly  IT-friendly  solution.  The  device  slides  into  a  rack  unit  in  a  single  space  and 
installs  literally  in  minutes.  It  integrates  seamlessly  with  routers,  switches,  load 
balancers,  firewalls,  and  all  the  other  vital  parts  of  an  enterprise  network. 


The  sleek  and  compact  Cisco  CTE  fits  into 
a  single  space  on  a  rack  unit. 


Content  Transformation  Engines  (CTEs)  in  Action 


Content  Transformation  Engines  (CTEs) 


KEEPING  IT  SIMPLE 

The  CTE  requires  none  of  the  usual  and  expensive  content  duplication  or  main¬ 
tenance  chores.  It  works  with  existing  content  and  doesn’t  require  that  content 
to  be  altered  one  bit.  Following  installation,  non-programmers  will  be  able  to 
create  device-specific  data  transformation  instructions  by  clipping  and  editing 
content  using  a  simple  point-and-click  interface. 

The  CTE  automatically  recognizes  the  device  making  a  content  request,  and 
then  dynamically  transforms  the  content  to  suit  that  device's  memory  and 
screen  requirements.  There’s  no  need  for  expensive  skilled  programmers,  nor 
are  there  any  monthly  hosting  charges  or  continuing  contracts  for  customiza¬ 
tion  as  content  evolves.  You  can  create  transformation  rules  for  a  large  body  of 
content  in  a  matter  of  a  few  hours,  and  then  download  these  rules  to  multiple 
CTEs  anywhere  in  the  network. 

Of  course,  the  security  of  sensitive  corporate  data  is  paramount  to  IT  staff. 
That’s  why  the  CTE  provides  a  Secure  Socket  Layer  (SSL)  connection.  Each  CTE 
supports  1400  simultaneous  connections  and  10,000  user  sessions.  And 
should  the  demand  for  CTE-based  services  grow  beyond  these  capabilities,  you 
can  simply  stack  additional  CTEs  and  scale  up. 

Mobile  users  have  been  able  to  surf  the  Internet  for  some  time.  Now  they  can 
access  meaningful  content  as  well,  thanks  to  the  Cisco  CTE.  For  more  informa¬ 
tion,  click  on  www.cisco.com/go/ctearticle. 


www.nwfusion.com 

11/12/01 

NetworkWorld  B3 

Service! 

■  THE  INTERNET 

■  WIRELESS  ■ 

Providers 

■  EXTRANETS  ■  INTEREXCHANGES  AND  LOCAL  CARRIERS 

REGULATORY  AFFAIRS 

OC-1 92  backbone  key  to  XO  rebound 


■  BY  MICHAEL  MARTIN 

RESTON.VA.  —  Troubled  voice  and  data 
service  provider  XO  Communications  said 
last  week  that  it  is  in  the  final  stages  of 
building  out  its  national  OC-192  network 
that  will  let  it  speed  deployment  of  new  ser¬ 
vices  to  corporate  customers  and  offer 
stronger  service-level  agreements. 

The  company  has  relied  on  leased  fiber 
to  connect  its  metropolitan  fiber  rings.  As  a 
result,  adding  new  bandwidth  for  intercity 
traffic  sometimes  took  a  long  time,  says 


■  Fiberlink  announced  last  week 


that  it  is  teaming  with  SmartPipes 
to  offer  users  enhanced  policy-man¬ 
agement  support.  Fiberlink  is  coupling 
its  Global  Remote  IP  VPN  dial-up  ser¬ 
vice  with  SmartPipes  Global  IP  Ser¬ 
vices  management  software,  which 
lets  users  establish  and  support  mul¬ 
tiple  policies  through  one  centralized 
site.  Global  Remote  IP  VPN  service  is 
available  in  150  countries.  Fiberlink 
says  SmartPipes  policy  support  will 
be  available  in  the  fourth  quarter. 
www.fiberlink.com 

■  Beginning  today,  managed  hosting 
services  provider  NaviSite  will  post 
on  its  Web  site  metrics  that  detail 
how  quickly  it  notifies  customers 
about  problems  and  resolves  those 
problems.  NaviSite  will  post  this  data 
on  a  monthly  basis. 

■  Data  Return,  a  Web  hosting  com¬ 
pany  that  specializes  in  managing 
Microsoft- based  applications,  is  the 
latest  technology  company  to  be 
snatched  up  by  Divine,  a  Chicago 
professional  services  and  software 
company,  in  a  stock-for-stock  transac¬ 
tion.  Divine  has  also  recently  acquired 
high-end  hosting  firms  Intira  and 
HostOne,  as  well  as  content -manage¬ 
ment  software  maker  Open  Market 
and  customer  relationship  manage¬ 
ment  software  maker  Synchrony. 


John  Curran,  vice  president  of  Internet 
technology  at  the  service  provider. 

The  near-completion  of  the  OC-192  back¬ 
bone  marks  the  culmination  of  XO’s  net¬ 
work  buildout  phase,  in  which  the  provider 
has  built  metropolitan  networks  in  64  cities 
in  seven  years.  XO  can  now  concentrate  on 
winning  new  business  to  reduce  the  mas¬ 
sive  debt  load  hanging  over  the  company 

“We’re  transitioning  from  a  build/con¬ 
struct  mentality  to  operating  the  network 
and  growing  our  customer  base,”  says  XO 
CEO  Dan  Akerson. 

There  aren’t  many  service  providers  that 
offer  as  wide  a  range  of  services  as  XO 
does.The  company’s  products  and  services 
include  local  voice,  long-distance  voice, 
Web  hosting,  VPN,  private  line,  Ethernet, 
wavelength, SONET,  DSL  and  fixed  wireless. 
This  breadth  of  services,  combined  with 
XO’s  geographic  reach,  sets  the  firm  apart 
from  other  providers,  Akerson  says. 

XO’s  main  competitors,  the  incumbent 
carriers,  can’t  offer  corporate  customers 
integrated  national  voice  and  data  pack¬ 
age  on  one  bill  because  they  don’t  have 
national  networks.  And  the  competitive 
local  exchange  carriers  with  which  XO  is 
often  lumped  —  McLeodUSA,  Williams 
Communications  and  Allegiance  Telecom 
—  have  different  operating  models. 
McLeodUSA  and  Williams  focus  on  the 
wholesale  market;  Allegiance  targets  small 


■  BY  TIM  GREENE 

SEATTLE  —  Aventail  has  added  manage¬ 
ment  features  to  its  secure  remote-access 
service  so  corporate  customers  can  make 
routine  changes, such  as  adding  and  drop¬ 
ping  authorized  users. 

The  Aventail. Net  2.0  service  offers  a 
secure  Web  interface  in  which  network 
managers  can  designate  new  users  and 
define  their  access  rights.  It  also  lets  preau¬ 
thorized  users  enroll  in  the  service,  down¬ 
load  necessary  software  and  create  their 
own  passwords. 

Aventail. Net  service  authenticates  re¬ 
mote  users,  encrypts  traffic  and  lets  it  pass 
through  the  corporate  firewall.The  service 
also  acts  as  a  protective  proxy  sitting 


and  midsize  businesses.  XO  targets  small, 
midsize  and  large  businesses. 

For  smaller  companies,  XO  will  pitch  a 
single  package  containing  a  mix  of  local 
voice,  long-distance  voice,  Internet  access 
and  maybe  Web  hosting, says  Nancy  Gofus, 
executive  vice  president  of  marketing  and 


customer  care.That  size  of  company  can’t 
cope  with  the  hassle  of  dealing  with  four 
different  companies  in  four  different  cate¬ 
gories,”  she  says. 

When  it  comes  to  Fortune  500  compa¬ 
nies,  Gofus  says  XO  isn’t  going  to  be  able  to 
run  in  and  take  over  an  entire  account.  No 
firm  that  size  is  going  to  hand  over  all  its 
communications  needs  to  one  provider. 
And  a  large  company  will  want  a  provider 
to  prove  itself  before  the  company  hands 
over  any  significant  business. 

“Our  goal  is  to  penetrate  those  enter¬ 
prises  through  an  innovative  product. 


between  remote  users  and  servers  on  the 
LAN.  The  service  relies  on  the  Internet  as 
the  public  backbone  to  carry  users’  data. 

The  service  differs  from  IP  Security  VPN 
services  in  that  it  does  not  need  client  soft¬ 
ware  on  remote  PCs  for  clients  to  gain 
access  to  corporate  resources. 

As  another  addition  to  the  Aventail.Net 
service,  corporate  users  can  delegate  man¬ 
agement  rights  to  business  units  within  the 
corporation  or  to  business  partners,  so 
they  can  manage  their  own  end  users. 
Both  options  lighten  the  management 
load  on  central  IT  staff. 

“If  we  merged  with  another  hospital  — 
and  we  could  —  that  might  come  into 
play”  says  Dan  Paton,  IT  adviser  for 
Oakwood  Healthcare  in  Dearborn, Mich., a 


[such  as]  our  VPN  or  Gigabit  Ethernet  ser¬ 
vice,  or  hit  buildings  of  theirs  that  happen 
to  be  close  to  our  network,”  Gofus  says. 

XO  has  had  more  success  winning  over 
small  and  midsize  businesses  than  large 
companies,  says  J.P  Gownder,  an  analyst 
with  The  Yankee  Group. 


“When  it  comes  to  the  data  services,  they 
have  a  large  base  of  small  and  [midsized] 
customers,  but  their  ambition  remains  at 
the  large  end,”  he  says. 

XO  has  managed  to  build  a  good-sized 
small  and  midsize  base  by  concentrating 
on  selling  bundles  that  include  voice,  data, 
Web  hosting  and  Internet  access  services, 
Gownder  says. 

XO’s  message  is  resonating  with  some 
business  customers.  The  company’s  rev¬ 
enue  this  year  should  be  between  $1,275 
billion  and  $1.3  billion,  Akerson  says,  up 

See  X0,  page  41 


collection  of  four  hospitals  and  more  than 
30  clinics. Oakwood  uses  Aventail’s  service 
to  support  remote  e-mail  access  and 
access  to  Oakwood’s  intranet. 

Aventail.Net  2.0  lets  its  authentication 
directory  share  authentication  directo¬ 
ries  of  specific  LAN  applications  so  data 
does  not  have  to  be  transferred  manual¬ 
ly.  Also,  Aventail  is  introducing  a  metadi¬ 
rectory  service  based  in  its  network  that 
syncs  with  corporate  directories,  re¬ 
ducing  the  time  it  takes  to  replicate 
changes  users  make  to  their  Lightweight 
Directory  Access  Protocol  directories. 

“This  was  a  required  addition.  Users  don’t 
want  to  recreate  directories,”  says  Corey 
Ferengul,  an  analyst  with  Meta  Group.  He 
See  Aventail,  page  41 


Remote-access  service  lightens  ITs  load 

Management,  directory  features  are  highlights  of  Aventail.Net  2,0. 


I  k We’re  transitioning  from  a  build/construct 
mentality  to  operating  the  network  and  growing 
our  customer  base.  9  9 

Dan  Akerson 

Chairman  and  CEO,  XO  Communications 
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It’s  the  power  of  Intef-based  servers.  It’s  delivering  customized, 
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DSView  gives  you  ‘point  and  click’ 
access  and  control  of  all  the  KVM 
and  serial  devices  in  your  data  center. 


With  the  new  DSR  analog/digital  KVM 
switches,  your  choices  for  access 
and  control  have  never  been  better. 

See  our  latest  designs  at 
www.avocent.com 


For  a  FREE  Smart  Server  Management  Guide  and  more  information  about  our  connectivity  solutions, 

visit  www.avocent.com  or  call  1-866-AVOCENT  (286-2368). 
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also  says  a  Web  page  to  let  cus¬ 
tomers  manage  their  own  users  is 
key  because  waiting  for  service 
providers  to  make  these  changes, 
such  as  revoking  rights  of 
employees,  can  be  a  security  risk. 

Aventail. Net  2.0  is  supported  by 
a  rack  of  servers  —  placed  on  the 
LAN  side  of  firewalls  at 
customer  sites  —  that 
proxy  Secure  Sockets 
Layer  (SSL)  sessions 
between  users  on  the 
Internet  and  resources 
on  the  corporate  LAN. 

Users  can  issue  SSL  soft¬ 
ware  clients  to  each  remote  user 
or  they  can  use  SSL  that  is 
embedded  in  their  Web  browsers. 

Users  authenticate  through  the 
Aventail  servers,  to  pre-existing 
corporate  directories  or  to  an 
Aventail  directory. 

Aventail  recently  announced  it 
landed  another  $55  million  in 
venture  financing. 


With  Aventail’s  new  customer  administrative  access, 
users  no  longer  have  to  rely  on  Aventail  when  they  want 
to  add  or  drop  users. 


0.  £«  !•*  B* 


Individuals 
or  groups 
can  be 
enrolled  for 
the  service. 


Network 
administrators 
fill  out  a  series 
of  fields  to  set 
up  new  users. 


The  service  costs  $10  to  $50  per 
person,  per  month,  depending  on 
selected  features.Aventail  guaran¬ 


tees  it  will  have  the  service  run¬ 
ning  within  10  weeks  of  ordering. 
Aventail:  www.aventail.com 


xo, 

continued  from  page  37 

from  $725  million  last  year. 

One  of  XO’s  new  customers, 
restaurant  chain  Planet  Holly¬ 
wood,  signed  on  this  year  be¬ 
cause  the  service  provider  was 
able  to  offer  an  integrated  pack¬ 
age  of  Web  hosting,  long-distance 
voice  and  VPN  data  for  its  28  loca¬ 
tions  across  the  country  Local 
voice  for  22  locations  was  also 
included  in  the  multiyear  con¬ 
tract,  worth  about  $1  million. 

XO’s  integrated  package  was  sig¬ 
nificantly  less  expensive  than 
those  offered  by  other  providers 
who  responded  to  Planet  Holly¬ 
wood’s  contract  tender,  says  Lori 
Ness,  Planet  Hollywood’s  director 
of  IT. 

Another  attraction  for  Planet 
Hollywood  was  that  XO  was  able 
to  provide  complete  voice  and 
data  service  to  more  than  90%  of 
the  restaurant  chain’s  locations, 
with  billing  breakdowns  by  loca¬ 
tion  on  one  bill. 


K 

The  one  big  cloud  on  XO’s  hori-  | 

zon  is  financing. XO  accumulated 
a  staggering  $5.3  billion  in  debt 
while  building  out  its  network. 

With  the  capital  markets  battened 
down  during  the  current  eco¬ 
nomic  storm,  new  financing  is 
tough  to  get. 

“If  I  were  a  business  signing  up 
with  XO,  I’d  have  some  concerns 
about  their  viability”  Yankee’s 
Gownder  says. 

Akerson  acknowledges  that 
XO’s  debt  is  a  potential  problem, 
but  he  says  that  for  now  at  least 
it’s  under  control. 

At  the  start  of  the  year,  XO  had 
about  $1.8  billion  in  cash  on 
hand.  By  the  end  of  the  third 
quarter,  the  company  had  a  little 
more  than  $1  billion  remaining, 
and  that  should  be  enough  to 
last  into  the  first  half  of  2003, 

Akerson  says. 

He  also  notes  that  XO  has 
the  backing  of  billionaire  in¬ 
vestor  Craig  McCaw  and  some 
big-name  customers,  including 
Microsoft.  ■ 


That  Are  At  The  Heart  Of  96%  Of  The  World's  Storage  Networks? 


Hard  at  work  at  the  very  heart  of  the  world's  most  demanding  and  reliable  storage 
networks,  you'll  find  McDATA  enterprise  solutions.  In  over  70  of  the  Fortune 
100, 10  of  the  15  largest  U.S.  banks,  and  9  of  the  10  top  ISPs.  We've 
leveraged  our  open  storage  networking  technology  and  fabric  management  software 
expertise  to  create  a  full  family  of  open  enterprise  solutions  —  core-to-edge. 
Day-in  and  day-out  delivering  99.999%  availability  to  some  of  the  world's  most 
prominent  companies,  we  have  the  experience  you  can  rely  on,  too.  So  go  to  our 
web  site  or  give  us  a  call.  Without  a  doubt,  we've  got  a  solution  that  fits  your  needs. 
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Does  it  seem  to  you  that  service  pro¬ 
viders  pay  more  attention  to  winning 
new  customers  than  to  keeping  their 
existing  customers  happy? 

You’re  not  imagining  things.  Statistics 
bear  this  out: 

•  The  cost  of  acquiring  a  new  wireless 
customer  averages  between  $250  and 
$300  per  subscriber  in  the  United  States. 

•  Depending  on  the  carrier,  churn  rates 
hover  between  2.2%  and  2.8%  per  month 
(26.4%  to  33.6%  per  year). 

•  At  the  end  of  last  year,  the  Cellular  Tele¬ 
communications  Industry  Association  esti¬ 
mated  there  were  about  109  million  active 
wireless  subscribers  in  the  United  States 
with  a  monthly  average  revenue  per  user 
of  $45.27. 

Based  on  these  statistics,  there  were  be¬ 
tween  28  million  and  36.7  million  churned 
subscribers  in  fiscal  year  2000.  At  the  low- 


What  the  cost  of  customer  churn  means  to  you 


end  cost  of  $250  per  acquisition,  the  cost  of 
acquisition  for  this  group  ranged  between 
$7.2  billion  and  $9.2  billion. 

The  U.S.  wireless  industry  made  about 
$52  billion  last  year, so  the  cost  of  acqui¬ 
sition  amounted  to  at  least  17.7%  of 
gross  revenue.  And  at  current  revenue 
levels,  it  takes  about  five- 
and-a-half  months  of  service 
simply  to  recoup  the  acqui¬ 
sition  expense. 

The  situation  is  similar 
throughout  most  of  Europe, 
where  cost  of  acquisition, 
churn  rates  and  declining 
monthly  average  revenue  per 
user  figures  all  put  a  squeeze 
on  providers. 

The  cost  of  acquiring  a  new  ISP  sub¬ 
scriber  averages  $400,  while  the  cost  of  re¬ 
taining  one  is  about  $100.  ISP  churn  rates 
average  4%  to  8%  per  month  (48  to  96% 
per  year).  EarthLink’s  current  churn  rate  is 
on  the  low  end  of  that  scale  at  almost  47% 
per  year. 

Churning  costs  the  nations  largest  dial-up 
ISPs  at  least  $10  billion  last  year.  Providers 
that  use  consumer-class  broadband  access 


such  as  DSL  and  cable  modems  generally 
experience  fewer  churns  than  consumer 
dial-up  ISPs.  However,  choice  of  ISP  over 
broadband  access  is  fairly  constrained 
right  now.  The  amount  of  churn  over  broad¬ 
band  is  artificially  depressed  and  will  rise 
as  broadband  access  providers  open  the 
door  to  ISP  choice. 


Both  ISPs  and  wireless  providers  are  bet¬ 
ting  that  new  2.5G  and  3G  data  services 
will  pump  up  revenue  by  increasing  the 
monthly  revenue  per  user  figures  and  de¬ 
creasing  churn. 

I  think  these  services  will  stimulate  pro¬ 
vider  revenue  and  profitability  for  up  to 
the  first  two-and-a-half  years  after  they  be¬ 
come  available  to  the  mass  market.  How¬ 
ever,  absent  the  continued  introduction  of 


new  popular  applications,  as  2.5G  services 
and  applications  become  widely  used  and 
brand  competition  increases,  wireless  data 
revenue  trends  will  begin  to  follow  those 
of  wireless  voice. 

What  does  all  this  chaos  mean  to  users? 
Companies  have  more  power  than  they 
realize.  Providers  may  act  as  though  they 
have  all  the  money  in  the 
world,  but  the  statistics  indi¬ 
cate  they  don’t. 

Still,  providers  can  be  terri¬ 
bly  intransigent  when  negot¬ 
iating  price,  service  quality 
and  customer  support.  In  re¬ 
sponse,  customers  should  sign 
contracts  of  no  longer  than 
one  year  and  should  never 
agree  to  an  exclusive  use  or  near-exclu¬ 
sive  use  clause. 

Continue  to  use  these  tactics  until  pro¬ 
viders  demonstrate  that  they  appreciate 
the  value  that  their  existing  customers  — 
you  —  bring  to  their  businesses. 

Pierce  is  a  research  fellow  at  Giga 
Information  Group.  She  can  be  reached  at 
lpierce@gigaweb.  com. 


Companies  have  more  power  than  they 
realize.  Providers  may  act  as  though 
they  have  all  the  money  in  the  world,  but 
the  statistics  indicate  they  don't. 


There  S  no  such  thing  as  One  Way  ...especially  when  it  comes  to  your  network  solutions.  So  why  do  some  turn  to  it?  Perhaps 
they  don’t  know  there’s  another  way:  Hypercom  Network  Systems.  As  developers,  it  is  our  job  to  cater  to  you,  our  financial  and 
retail  customers  who  want  to  Upgrade  rather  than  replace  their  network.  And,  unlike  our  ^this  is  the  Only  Wcty//  competitors, 
we  take  the  consultative  approach  and  direct  our  customers  through  network  planning  and  design  with 
carefully  constructed  solutions  that  actually  work.  Customized.  Individualized.  Real  Network  Solutions. 


Certainly  not  us. 


We’ve  also  launched  an  attention-grabbing,  new  interactive  Web  site  to  make  the  process  even  easier  for  you. 
By  visiting  www.CUStomnets.com  and  entering  basic  information  about  your  current  network  needs,  you’ll  get  a  fully-customized  blueprint 
of  your  new  network  in  less  than  5  minutes.  Or,  you  can  navigate  through  our  menu  of  industry-specific  working  combinations. 
Smart,  huh?  And  no  need  to  get  stuck  in  one  and  only  one  solution.  It’s  your  network  we’re  talking  about  here. 
“One  Way”  is  simply  not  enough.  It  must  take  you  where  yOU  want  to  go. 

So,  next  time  someone  says  it’s  “their  way  or  the  highway”. .  .start  looking  for  the  nearest  on-ramp. 


out  about  real  network  solutions,  \ 


It  could  be  the  smartest  minutes  of  your  dav. 
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NETWORK  VISION™ 


NetTool.™  You're  looking  at  the  world's  only  pocket-sized  personal 
connectivity  tester.  It  combines  cable,  network  and  PC  configuration 
testing  into  one  palm-sized  tool  that  dramatically  increases  everyday 
productivity  for  frontline  technicians  and  Help  Desk  troubleshooters. 
Suddenly  moves,  adds  and  changes  go  faster  than  ever  before.  And  that 
gives  you  more  time  for  what  you  do  best  -  provide  Network  Supervision. 
See  for  yourself.  Click  into  our  demo  at  www.fluke-net.com/nettool. 
Once  you  see  NetTool  in  action,  you  won't  want  to  make  a  move 
without  it.  Totally  awesome. 

See  for  yourself.  Click  into  our  live  demo  at 

www.fluke-net.com/nettool  and  enter  to  win 
a  FREE  NetTool. 

®2001  Fluke  Networks.  Inc.  U.S.  (800)  283-5853.  Canada  (800)  363-5853. 

Europe  (31  40)  2  675  200.  Other  countries  (425)  446-4519. 
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■  SERVICE  PROVIDER  DEVELOPMENTS 
AT  THE  JUNCTURE  BETWEEN  THE  ENTERPRISE 
AND  THE  NEW  PUBLIC  NETWORK 


Redback  pins  comeback  hopes  on  router 

Falloff  in  DSL  demand  puts  company  on  thin  ice. 


■  BY  STEPHEN  LAWSON 

SAN  JOSE  —  Redback  Networks,  a  young 
star  back  in  the  days  when  consumers 
looked  like  a  gold  mine  for  broadband  net¬ 
work  builders,  is  now  banking  on  a  come¬ 
back  with  equipment  designed  mostly  for 
business  services. 

About  a  year  and  a  half  after  it  began  a 
foray  into  metropolitan-area  optical  net¬ 
works  —  a  move  the  company  acknowl- 


■  Xacct  Technologies  and  Motor¬ 
ola  last  week  announced  a  multiyear 
OEM  agreement.  Motorola  will  license 
Xacct's  Xacctmobile  billing  software 
for  use  in  its  Aspira  wireless  mobile 
IP  system.  This  will  let  service  pro¬ 
viders  merge  Universal  Mobile  Tele¬ 
communications  System,  General 
Packet  Radio  Service  and  Code  Divi¬ 
sion  Multiple  Access  service  informa¬ 
tion  with  IP  data  services  for  billing 
and  provisioning  purposes,  the  com¬ 
panies  say.  Xacctmobile  collects  and 
synthesizes  raw  call  detail  records 
with  data  content  from  the  IP  network 
to  allow  billing  for  content  and  appli¬ 
cation  quality  of  service,  among  other 
features. 

■  WaveSmith  Networks  has  named 
former  Marconi  executive  Robert 
Doucette  as  executive  vice  president 
of  manufacturing.  As  executive  vice 
president  of  global  supply  chain  at 
Marconi,  he  was  responsible  for  all 
operational  aspects  of  multinational 
manufacturing  facilities  with  a  com¬ 
bined  workforce  of  several  thousand 
employees.  Before  Doucette  was  at 
Marconi,  he  was  senior  vice  president 
of  operations  at  Fore  Systems,  where 
he  was  responsible  for  global  manu¬ 
facturing,  corporate  information  sys¬ 
tems,  customer  service,  logistics  and 
facilities  functions.  He  was  also  vice 
president  of  manufacturing  operations 
at  Fore  for  three  years. 


edges  has  had  limited  success  —  Redback 
is  enhancing  its  existing  products  and  roll¬ 
ing  out  a  device  it  hopes  will  hit  the  sweet 
spot  in  that  market:  a  small,  resilient  edge 
router  that  can  terminate  a  lot  of  low-speed 
connections. 

The  company’s  new  CEO,  Kevin  DeNuc- 
cio,  hopes  to  guide  Redback  into  a  brighter 
future  with  the  new  router  and  upgrades  to 
its  existing  products.  The  former  Cisco 
executive  joined  the  company  in  the  wake 
of  layoffs  and  several  departures  of  top 
executives.  The  financial  woes  of  start-ups 
offering  DSL  broadband  access  hit  Red- 
back  hard,  DeNuccio  says.  A  broader  line¬ 
up,  he  says,  will  help  it  recover. 

“Any  time  you’re  a  leader, you  get  hurt,”  De¬ 
Nuccio  says.  “We’re  turning  the  corner 
because  our  product  portfolio  is  changing 
dramatically” 

Redback,  launched  in  1996  in  San  Jose  by 
former  Cisco  employees,  was  an  early 
mover  in  the  market  for  DSL  equipment.  Its 
first  product  line,  called  Subscriber  Man- 


■  BY  TERRI  GIMPELSON 

OTTAWA  —  An  optical  start-up  is  about 
to  emerge  from  stealth  mode  with  a  prod¬ 
uct  said  to  integrate  optical  switching 
and  transmission  at  one-fifth  the  cost  and 
real  estate  of  alternatives. 

The  company  is  Edgeflow,  and  its  prod¬ 
uct  is  the  Edgeflow  Optical  Add/Drop 
Switch  (OADX)  7200.  The  7200  occupies 
half  a  rack  and  combines  wave  division 
multiplexing  (WDM)  with  cross-connect 
functionality. 

The  7200  is  said  to  be  “transparent,”  in 
that  it  supports  a  variety  of  services,  in¬ 
cluding  SONET,  Gigabit  Ethernet  and 
storage-area  network  protocols,  on 
several  all-optical  interfaces.  They 
include  dense  WDM  (DWDM),  coarse 
WDM  (CWDM),  and  1310  nm,  1560  nm 
and  850  nm. 

The  7200  terminates  wavelengths  at 
each  hop  and  switches  them  electroni¬ 
cally.  It  “retimes,  reshapes  and  regener¬ 
ates”  the  optical  signal,  Edgeflow  says, 
which  saves  on  the  cost  of  additional 


agement  System  (SMS),  could  aggregate 
customers’ broadband  and  leased-line  con¬ 
nections  and  also  let  service  providers 
quickly  and  easily  configure  those  services. 
Most  service  providers  had  been  doing  this 
by  reconfiguring  Cisco  routers,  which 
offered  less  flexibility  and  a  slower  turn¬ 
around  time,  analysts  say 

The  SMS  was  snapped  up  by  most  of  the 
regional  Bell  operating  companies  offering 
broadband  in  the  U.S.  and  by  many  other 
carriers  worldwide,  and  it  inaugurated  a 
new  product  category  according  to  Jenni¬ 
fer  Liscom,  a  Gartner  analyst. 

But  in  the  fast-changing  world  of  net¬ 
working,  one  revolution  can’t  sustain  a  ven¬ 
dor  for  long.  Redback  soon  saw  broadband 
deployment  tail  off  across  the  U.S.  as  fund¬ 
ing  for  many  start-up  carriers  dried  up. 

In  late  1999,  the  company  looked  to  an¬ 
other  market  that  was  expected  to  boom: 
metropolitan-area  optical  networks.  While 
both  the  WANs  between  major  cities  and 
the  infrastructures  for  bringing  high-speed 


regeneration  equipment. 

“They’ve  offered  a  workable  combina¬ 
tion  that  switches  wavelengths  electri¬ 
cally,  and  it’s  bit  rate-  and  protocol-inde¬ 
pendent,”  says  Mark  Storm,  optical  net- 
See  Edgeflow,  page  46 
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PROFILE:  EDGEFLOW 

Location:  Ottawa 

Founded:  April  2000 

Product:  Edgeflow  Optical 

Add/Drop  Switch  (OADX) 

CEO  and  President:  Weston  Biggs 

Financing:  $24  million  from  Sierra 
Ventures,  Newbury  Ventures, 
EagleOne  Ventures  and  others. 

Competitors:  LuxN's  WS  6400 
Optical  Aggregation  Switch;  next- 
generation  SONET  and  MSPP 
vendors. 

Employees:  90+ 

_ / 

The  incredible 
shrinking  market 

Worldwide  demand  for  broad¬ 
band  aggregation  devices,  where 
Redback  is  the  market  leader, 
has  dried  up  over  the  past  two 
quarters. 


Internet  access  to  homes  and  businesses 
were  being  expanded  rapidly  in  the  late 
1990s,  the  metropolitan  networks  that  con¬ 
nected  the  two  ends  in  many  cases  were 
left  behind. 

In  November  1999,  Redback  reached  an 
agreement  to  buy  Siara  Systems,  one  of  sev¬ 
eral  companies  developing  optical  trans¬ 
port  platforms  that  would  help  RBOCs  and 
their  competitors  break  bandwidth  con¬ 
straints  around  urban  areas.The  Siara  prod¬ 
uct  became  Redback’s  SmartEdge  800 
transport  platform. 

Meanwhile,  Redback  still  derived  80%  of 
its  revenue  from  the  SMS  line,  which  was 
rapidly  being  outclassed  by  newer,  service- 
rich  routers  and  IP  service  switches, 
according  to  Kevin  Mitchell,  an  analyst  at 
Infonetics  Research. 

That’s  why  Redback  recently  unveiled 
what  it  expects  to  be  another  breakthrough 
product,  the  SmartEdge  800  Router.  It  is 
designed  as  an  alternative  to  the  WAN  core 
routers  most  metropolitan  network  pro¬ 
viders  have  deployed  at  the  edges  of  their 
networks,  said  Bruce  Van  Nice,  director  of 
technical  marketing  at  Redback. 

The  SmartEdge  Router  lets  carriers 
deploy  more  interfaces  for  the  Internet 
speeds  businesses  want,  especially  1.5M 
bit/sec  connections,  Van  Nice  says. 
Another  use  of  the  router  will  be  for  large 
carriers  to  sell  capacity  on  metropolitan 
networks  at  wholesale  to  smaller 
providers. 


Start-up  Edgeflow  emerges 
with  metro  optical  switch 


See  Redback,  page  46 
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Cisco  silent  in  softswitches,  for  now 

Company  playing  quietly  and  prepping  bigger  push,  but  missing  out  on  latest  action. 


■  BY  JIM  DUFFY 

RICHARDSON,  TEXAS  —  Cisco 
is  quietly  ramping  up  a  push  into 
the  domestic  softswitch  market  as 
its  competitors  reap  the  immed¬ 
iate  rewards. 

The  company’s  offering  is 
called  the  BTS  10200  and  was  in¬ 
herited  after  last  year’s  purchase 
of  IPCell.  The  product  performs 
local  and  long-distance  packet 
telephony, and  ISDN  Primary  Rate 
Interface  (PRI)  offload,  which 
handles  Internet  modem  dial-up 
calls  on  behalf  of  Class  4  and  5 
circuit  switches.  It  also  provides 
transit  services  for  bypassing  tan¬ 
dem  switches. 

Cisco  has  one  production  cus¬ 
tomer  for  the  BTS  10200  — 
Cbeyond,  an  Atlanta  competitive 
local  exchange  carrier  that’s 
offering  local  telephony  services 
and  PRI  offload  to  small  and 
midsize  businesses  in  the  Atlanta 
area.  A  second  CLEC  customer 
for  the  BTS  10200,  BroadRiver  of 
Alpharetta,  Ga.,  went  out  of  busi¬ 
ness  earlier  this  year. 

The  BTS  10200  is  in  trials  with 
other  carriers  that  Cisco  cannot 
name,  says  Amy  Mitchell,  product 
manager  for  the  softswitch. 

“We’re  still  several  months  away 
from  doing  major  pushes  [into 


the  softswitch  market] ,  but  there’s 
a  lot  of  activity  and  a  lot  of  inter¬ 
est,”  Mitchell  says. “We’re  going  to 
be  fairly  low-key-looking  for  sev¬ 
eral  more  months.” 

Cisco  says  it  never  officially 
launched  the  BTS  10200  for  fear 
of  generating  demand  it  could 
not  meet.  Softswitch  customers 
require  a  lot  of  one-on-one  con¬ 
tact  and  supervision,  a  Cisco 
spokeswoman  says.“We’re  doing 
this  very,  very  cautiously  to  make 
sure  that  everybody  is  up  and 
running  and  successfully  carry¬ 
ing  traffic  before  making  a  real 
push  externally,” she  says. 

But  observers  note  Cisco  has 
had  limited  success  in  selling 
packet  telephony  to  service  pro¬ 
viders,  and  the  company  may  be 
holding  back  on  its  softswitch 
push  for  fear  of  offering  an  im¬ 
mature  product.  Meanwhile, 
other  vendors  are  gaining  signif¬ 
icant  ground,  ostensibly  at  Cis¬ 
co’s  expense. 

Nortel  last  week  won  a  huge 
contract  to“packetize”3.6  million 
lines  of  Sprint’s  local  telephone 
operations.  The  agreement  is  val¬ 
ued  at  $1.1  billion  over  four  years. 

Qwest  Communications  re¬ 
cently  awarded  softswitch  con¬ 
tracts  to  Nortel  and  Sonus  Net¬ 
works;  Telica  won  a  deal  with 


Soft  peddle 

Components  of 
Cisco’s  BTS  10200 
softswitch, 
which  has  not 
been  marketed 
aggressively: 


Alarm  panel 
and  DC  power 
distribution  unit. 


Element  manage¬ 
ment  system  and 
call  agent  servers. 


Two  Ethernet 
switch/routers 
and  a  disk  array. 


Element  manage¬ 
ment  system  and 
|  call  agent  servers. 


Verizon;  and  ip- 
Verse,  Convergent 
Communications 
and  others  are  also 
winning  their  share 
of  business. 

Cisco,  a  leader  in 
enterprise  packet 
telephony  remains 
conspicuously 
silent  in  the  service 
provider  realm. 

Cisco  bid  against 
Nortel  on  the  Qwest 
deal,  and  its  MGX 
8850  multiservice 
switches  transport 
voice  in  the  Qwest 
network.  But  Nortel 
won  for  its  ability  to 
convert  voice  into 
switched  virtual  cir¬ 
cuits  using  ATM 
Adaption  Layer  1 ,  a 
capability  Cisco  has 
not  yet  introduced, 
the  spokeswoman 
says. 

“We  are  hitting  the  markets 
where  we  see  good  opportunity 
[with  the  BTS  10200],”  Mitchell 
says.  “And  we  have  a  very  full 
roadmap  of  things  planned  and 
in  high  demand.” 

The  company’s  been  slow  to 
roll  its  own,  analysts  say. 


“I  don’t  think  Ciscos  been  slack¬ 
ing  off  in  this  area,”  says  Tom 
Valovic,  an  analyst  at  market  re¬ 
search  firm  1DC.  “If  they  have 
slacked  off  in  this  area,  it’s  in  the 
development  of  their  own  soft- 
switch.  They  never  had  a  strong 
internal  softswitch  offering. 
They’ve  been  able  to  fill  a  lot  of 
the  gaps  using  gatekeeper  prod¬ 
ucts,  which  are  sort  of  the  prede¬ 
cessor  of  softswitches.” 

Cisco  does  not  plan  to  com¬ 
pete  with  the  pure  softswitch 
vendors,  but  partner  with  them. 
These  softswitches  would  han¬ 
dle  line-side  service  while  the 
BTS  would  provide  the  SS7  con¬ 
nection,  Mitchell  says. 

“The  competition  we  watch 
out  more  for  is  the  Cisco-level 
competition  in  the  voice  space 
[such  as  Lucent  and  Nortel]  and 
other  packet  telephony  compa¬ 
nies  that  have  softswitches  and 
gateways  [such  as  Sonus],"  she 
says. 

BTS  10200  supports  the  Media 
Gateway  Control  Protocol,  Sig¬ 
naling  System  7,  Session  Initia¬ 
tion  Protocol  and  PRI  standards 
for  connectivity  with  other  cir¬ 
cuit  and  packet  telephony  sys¬ 
tems,  and  with  Cisco  gateways. 
H.323  is  on  the  roadmap  for 
early  next  year,  Mitchell  says.  ■ 


Edgeflow 

continued  from  page  45 

working  program  leader  at 
Frost  and  Sullivan  in  San 
Antonio,  Texas.  “Other  switches 
don’t  have  the  ability  to  manip¬ 
ulate  wavelengths  inside  the 
box.” 

The  7200  supports  multiple 
topologies  such  as  point-to- 
point,  point-to-multipoint,  ring 
and  mesh.  In  point-to-multipoint 
topologies,  Edgeflow  says  its 
7200  can  support  “bridge  and 
roll”  maintenance  in  which  a 
signal  is  broadcast,  or  bridged, 
across  a  secondary  path. 

If  the  primary  path  fails,  the 
connection  is  "rolled”  over  to 
the  secondary  path,  and  signal 
transmission  resumes.  Path  re¬ 
storation  can  take  from  less 
than  50  msec  to  less  than  two 
seconds,  Edgeflow  says. 

In  its  initial  release,  the  7200 
will  be  available  in  a  fully  re¬ 
dundant.  128-by-128  switching 
fabric.  Other  releases  of  the  pro¬ 


duct  will  include  a  metropoli¬ 
tan  edge  switch  supporting  16 
or  32  OC-48  lambdas,  and  a 
metro  access  unit  supporting 
four  or  eight  OC-48  lambdas. 

Edgeflow  also  has  plans  to 
offer  an  in-service  upgrade  to 
the  7200  box  that  will  scale  up 
to  512  lambdas  and  include  OC- 
192  and  10G  Ethernet  inter¬ 
faces.  This  5 1 2-by-5 1 2  switch 
will  occupy  two  racks  instead  of 
1 1  required  by  competing  sys¬ 
tems,  Edgeflow  says. 

Edgeflow’s  management  soft¬ 
ware  is  called  Intelligent  Virtual 
Fiber  Networking.  It  lets 
customers  partition  network 
resources  depending  on  the 
size  of  a  business,  or  for  service 
differentiation. 

Storm  warns  that  Edgeflow 
still  has  to  prove  itself  in  a  de¬ 
clining  economy  and  in  a  mar¬ 
ket  where  no  product  like  the 
OADX  currently  exists.  He  also 
notes  the  7200’s  inability  to 
groom  at  the  STS-1  level  may 
limit  its  appeal. 


“They’re  really  going  to  be 
competing  more  with  the  new 
all-optical  cross-connects  than 
with  other  existing  systems,” 
he  says.  “Those  boxes  for  the 
metro  can  groom  down  to  the 
STS-1  level.” 

LuxN  appears  to  be  Edge- 
flow's  biggest  competitor  with 
its  WS  6400  optical  service  ag¬ 
gregation  box.  However,  LuxN’s 
offering  is  only  available  in  a  64- 
by-64  switching  fabric  that  can 
scale  to  1 28-by-l  28. 

Other  competitors  in  the  digi¬ 
tal  cross-connect  space  include 
Fujitsu,  Nortel  and  Alcatel.  ONI 
Systems,  ADVA  Optical  Network¬ 
ing,  Astral  Point  and  Marconi 
have  similar  offerings  in  the 
optical  add-drop  multiplexer  in¬ 
dustry.  TeraBurst  and  Sorrento 
are  competitors  in  the  wave¬ 
length  cross-connect  arena. 

The  OADX  7200  will  be  in  tri¬ 
als  by  year-end  with  expected 
general  availability  around 
June  2002. 

Edgeflow:  www.edgeflow.com 


Redback 

continued  from  page  45 

Genuity  which  sells  DSL  ser¬ 
vices  to  corporations  and  ser¬ 
vice  providers,  is  considering 
deployment  of  the  SmartEdge 
transport  and  routing  boxes  to 
support  a  variety  of  services.  On 
Genuity’s  European  and  trans- 
Atlantic  networks,  the  Redback 
products  would  let  the  carrier 
deploy  circuit-based  and  packet- 
based  services  on  the  same  plat¬ 
form, says  Steve  BlumenthaLCTO 
at  the  Burlington,  Mass.,  carrier. 

Genuity  also  uses  SMS  for  sub¬ 
scriber  management  and  some 
tunneling  services.  The  carrier 
provides  firewall  services 
through  hardware  at  the  cus¬ 
tomer  premises.  Because  the  SMS 
doesn’t  have  that  feature  now, 
Genuity  may  turn  to  another  ven¬ 
dor  for  it. 

However,  Redback  is  not  stand¬ 
ing  still  in  any  department.  In 
addition  to  rolling  out  the  new 
router,  Redback  recently  upgrad¬ 


ed  the  SmartEdge  800  transport 
device  with  Gigabit  Ethernet  and 
support  for  Synchronous  Digital 
Hierarchy,  the  international  ver¬ 
sion  of  the  SONET  standard  used 
in  many  U.S.  metropolitan  net¬ 
works.  In  mid-2002,the  company 
says  it  will  boost  the  perfor¬ 
mance  of  the  SMS  platform  to 
support  additional  services. 

With  the  introduction  of  the 
SmartEdge  Router,  Redback  has 
a  broader  range  of  products  and 
relationships  with  most  of  the 
major  carriers,  ingredients  it 
hopes  will  help  turn  the  com¬ 
pany  around. 

Lawson  is  a  correspondent  with 
IDG  News  Services'  San  Fran¬ 
cisco  bureau. 
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RS16000 


Introducing  the  RS  16000  from  Riverstone  Networks. 


It's  the  new  generation  of  router  built  expressly  for 


Gigabit  and  10-Gigabit  Metropolitan  Area  Networks 


The  chassis-based  RS  16000  delivers  up  to  60  wire 


speed  Gigabit  ports,  along  with  10-Gigabit  Ethernet 


and  CWDM  uplinks  all  in  5  rack  units  -  that  s  70%  more 


Gigabit  ports  per  rack  inch  than  the  nearest  competitor. 


For  service  providers,  this  means  more  revenue  per 


rack  and  lower  operating  costs 


But  the  RS  16000  is  more  than  the  highest  density  router 


in  the  industry.  As  a  full-function,  Internet-caliber  metro 


optimized  router,  it  also  delivers  rich  service  creation 


capabilities.  Through  hardware-based  MPLS,  bandwidth 


carving,  and  extensive  billing  and  accounting,  the  RS  16000 


converts  raw  bandwidth  into  profitable  services  for  carriers 


throughout  the  Metropolitan  Area  Network 


Contact  Riverstone  Networks  at  1-877-778-9595  or  visit 


riverstonenet.com/nww  to  see  how  we're  changing, the 


rules  in  the  Metro. 


River 
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Bandwidth  with  Brains 


60  GIGABIT  PORTS,  10-GIGABIT  UPLINKS. 
WIRE-SPEED  METRO  RC  TER  WITH  MPLS. 

A  _L  IN  5  RACK  UNITS. 
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Going  The  “Last  Mile*’  For  c-xpedient 


RELESS  CANOBEAM  IS  CRITICAL  To 

Our  Metro  Area  Network.” 


Brian  Andrew,  President  and  CEO,  e-xPEDiENV",  a  CAVU,  Inc.  service. 


was  both 
immediately 
available  and 
V  loaded  with  a 

comprehensive 
list  of  features 

s-  that  were  critical 

to  our  network 
requirements"  stated 
Brian  Andrew,  e-xpedient 
President  and  CEO.  “The 
combination  of  Canobeams  along  with 
60  GHz  radios  gives  us  the  ability  to  go  and  get 
any  building  anywhere  in  any  city  at  five  9’s 
reliability,  and  to  deliver  a  ‘technology  toolbox’ 
allowing  for  dense  deployments  without 
interference  issues  or  complicated 
frequency  planning.” 


Going  the  extra 
mile  has  made 
Canon  the  leader 
in  optical 
technology 
worldwide.  So  it 
was  no  surprise 
when  broadband 
supplier  e-xpedient/ 

selected  their 


CAVU,  Inc 
Canobeam  DT-50  light  beam 
transmission  (Free  Space  Optics) 
system  as  the  “last  mile” 
in  the  launch  of  its  Miami  Metropolitan 
Area  Network. 


The  technologically  proven  and  secure 
Canobeam  DT-50  is  the  ideal  solution  for 
e-xpedient’s  carrier  class  expectations.  Featuring 
Auto-Tracking,  and  3R  repeater  technology,  fast 
setup,  and  no  FCC  frequency  allocation 
or  licensing  requirements,  it 
provides  e-xpedient  with  a 
highly  reliable  link  and  constant 
footprint  for  its  fully  redundant, 

100  Mbps  Internet  Protocol  (IP), 

switched  Ethernet  network.  %  ,v 


For  more  information  on  the 
Canobeam  DT-50  or  the  new 
DT-30  lower  cost  model,  visit 
www.canobeam.com,  or  call 
1-800-321-4388.  To  learn  more 
about  e-xpedient,  go  to 
www.e-xpedient.com 


for  more  info:  Call  1-800-321-4388 

Canada:  905-795-2012) 
nti;:  vvww.  canobeam.  com 
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■  AN  INSIDE  LOOK  AT  THE 
TECHNOLOGIES  AND  STANDARDS 
SHAPING  YOUR  NETWORK 


ISCSI  enables  Ethernet  storage  nets 


■  BY  BOB  FINE 

With  Ethernet  reaching  Gigabit  and  even 
10  Gigabit  speeds,  and  the  current  move  to 
network-based  storage,  it  was  inevitable  for 
the  industry  to  explore  ways  to  utilize 
Ethernet  as  a  storage  network  technology 

That’s  the  basis  for  iSCSI.  The  payoff  is 
simple:  With  iSCSI  there  isn’t  a  require¬ 
ment  to  learn  how  to  set  up  and  manage 
two  different  (storage  and  data)  technolo¬ 
gies.  IT  managers  can  still  use  Fibre 
Channel,  but  only  as  it  was  originally  con¬ 
ceived,  as  a  storage  device  interface. 

ISCSI  enables  universal  access  to  storage 
devices  and  storage-area  networks  over 
standard  Ethernet-based  TCP/IP  networks. 
These  networks  may  be  dedicated  or 
shared  with  traditional  Ethernet  applica¬ 
tions.  IP  routers  and  switches  can  be  used 
to  extend  the  IP  storage  network  to  the 
wide  area  for  applications  such  as  syn¬ 
chronous  and  asynchronous  remote  disk 
copy,  or  tape  backup  and  restore. 

In  the  WAN, TCP  will  ensure  data  reliabil¬ 
ity,  manage  network  congestion  and  adapt 
retransmission  strategies  to  WAN  delays. 

As  with  the  standard  SCSI  protocol,  iSCSI 
requires  an  initiator  and  a  target.Therefore, 
for  iSCSI  to  work  as  a  transport  system,  it 
requires  iSCSI  drivers  installed  in  servers  to 
initiate  iSCSI  packets,  by  which  block-ori¬ 
ented  SCSI  data  is  encapsulated  into  an 
iSCSI  wrapper.  This  packet  is  then  routed 
across  IP  networks  and  ultimately  sent  to 
an  iSCSI  target  device,  which  converts  the 
embedded  SCSI  data  to  Fibre  Channel. 

Management  and  security  features, 
including  logical  unit  number  mapping 
and  access  control  lists,  ensure  data 
integrity  throughout  this  process,  making 


■  HOW  IT  WORKS 


iSCSI 

With  iSCSI-enabled  Ethernet-based  storage,  multiple 
servers  running  different  operating  systems  can  pool 
their  storage,  creating  greater  efficiency. 


iSCSI  drivers  installed 
on  servers  encapsulate 
data  into  iSCSI  packets. 
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Data  from  Unix  and 
Windows  servers  is  pooled 
in  one  storage  device. 


sure  servers  store  and  retrieve  information 
from  the  targeted  storage  devices  accord¬ 
ing  to  configurations  defined  by  a  net¬ 
work  administrator. 

One  of  the  key  requirements  for  high-per¬ 
formance  iSCSI  networking  is  for  operation 
without  consuming  more  host  CPU  cycles 
than  SCSI  or  Fibre  Channel.  Understanding 
this  requirement,  leading  network  interface 
card  (NIC)  and  host  bus  adapter  vendors 
are  developing  iSCSI-based  products  with 
TCP  acceleration  features.  Soon,  most 


servers  will  be  able  to  use  an  iSCSI-specific 
NIC  that  will  contain  a  TCP  offload  engine 
that  reduces  the  load  on  the  CPU.  The  net 
result  will  be  iSCSI  storage  networks  that 
are  as  efficient  as  directly  attached  Fibre 
Channel  or  SCSI  storage. 

Enterprise  applications 

ISCSI  lets  companies  connect  more 
servers  to  each  other  in  high-performance 
corporate  storage  networks  over  greater 
distances.  This  gives  IT  managers  more 


flexibility  in  designing  and  applying  enter¬ 
prise  storage  networks.  Examples  of  typi¬ 
cal  iSCSI-based  applications  we  can 
expect  corporations  to  run  are: 

•  Remote  backup:  Using  iSCSI,  compa¬ 
nies  can  remotely  back  up  storage  from 
branch  offices  to  storage  networks  at  the 
corporate  data  center.  Through  this  WAN 
access,  storage  can  be  backed  up  from  any 
location  with  an  IP  connection.  This 
approach  leads  to  significant  cost  savings 
and  better  use  of  disk  space.  Companies 
can  also  use  readily  available  IP  network 
security  technologies  such  as  firewalls, and 
encryption  and  authentication  tools  to  pre¬ 
vent  unauthorized  access  into  storage  and 
ultimately  to  data. 

•  Remote  data  access:  ISCSI  makes 
remote  storage  resemble  local  storage,  so 
enterprise  users  can  access  business-criti¬ 
cal  data  from  anywhere  in  the  world.  This 
ability  can  translate  into  a  competitive 
advantage,  as  businesses  can  access  data 
remotely  while  improving  security  features. 

•  Enterprise  storage  consolidation:  With 
iSCSI, companies  with  multiple  servers  and 
different  network  operating  systems  can 
efficiently  pool  storage.  Low-  to  moderately 
priced  servers  with  low-cost  Ethernet  inter¬ 
faces  can  be  pooled  together  for  cost  sav¬ 
ings.  IP  interfaces  can  be  tied  together 
using  existing  data  and  SAN  infrastruc¬ 
tures.  This  reduces  cost  related  to  equip¬ 
ment  and  staff  in  comparison  with  server- 
attached  storage.  Companies  can  also  bet¬ 
ter  utilize  storage  capacity  by  pooling  more 
servers  together  in  the  storage  network. 

Fine  is  the  product  manager  for  the  iSCSI- 
based  Cisco  SN  5420  Storage  Router.  He 
can  be  reached  at  bfine@cisco.com. 


Dr.  Internet  By  Steve  Blass 

I'm  trying  to  share  my  PC’s  Internet  connection 
with  my  Macintosh  using  Sygate's  Home  Network¬ 
ing  4.2  installed  on  my  PC.  My  broadband  connec¬ 
tion  uses  PPP  over  Ethernet  The  PC’s  Ethernet 
card  IP  address  is  192.168.0.1,  the  Mac's  IP  ad¬ 
dress  is  192.168.0.4,  and  the  subnet  mask  is  set 
to  255.255.255.0  for  both  of  them.  The  documen¬ 
tation  says  to  set  the  gateway  address  on  the  cli¬ 
ent  to  the  virtual  IP  address  used  by  Sygate,  but 
then  says  that  Sygate  does  not  support  virtual  IP 


addresses  for  PPPoE  connections.  I’m  not  sure 
what  to  set  the  default  Internet  gateway  address 
or  DNS  address  to  on  the  Mac.  The  Sygate  soft¬ 
ware  indicates  that  bytes  are  sent  and  received 
every  time  I  try  to  go  to  a  Web  site  on  my  Mac,  but 
nothing  appears  in  the  Mac's  Web  browser.  How  do 
I  set  them  to  make  this  work? 

Setting  the  Internet  gateway  address  and  the  DNS 
address  on  your  Mac  to  the  IP  address  used  by 


your  PC's  Ethernet  interface  should  fix  it.  The  192 
,168.0.x  addresses  used  by  your  Ethernet  cards  are 
your  local  network  addresses.  The  Sygate  software 
handles  DNS  and  acts  like  a  router  for  your  local 
net,  and  this  makes  your  PC’s  Ethernet  interface 
the  Internet  gateway  and  DNS  server  for  the  Mac. 

Blass,  a  network  architect  at  Changefa) 

Work  in  Houston,  can  be  reached  at  dr.inter 
net@changeatwork.com. 
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More  packets,  more  decodes 

GEARHEAD  RATING 


As  promised,  this  week  well  look  at 
AiroPeek  from  WildPackets,  a  tool 
designed  specifically  for  capturing, 
storing, analyzing  and  reporting  on  802.1  lb 
wireless  systems. 

WildPackets  (www.wildpackets.com) 
produces  some  really  neat  protocol  ana¬ 
lyzers  (see  www.nwfusion.com,  DocFinder: 
6836)  and  AiroPeek  is  no  exception.  In  a 
nutshell,  AiroPeek  is  a  very  sophisticated 
wireless  LAN  sniffer. 

To  run  the  software  you’ll  need  a  ma¬ 
chine  (a  laptop  is  preferable,  as  you’ll  prob¬ 
ably  be  running  around  a  lot)  with  at  least 
a  266-MHz  Pentium  and  at  least  128M  bytes 
of  RAM  running  Windows  98,  Millenium 
Edition,  NT  4.0  (SP3  or  later)  or  2000. 

You’ll  also  need  one  of  a  limited  selec¬ 
tion  of  wireless  PC  cards:  We  used  a  3Com 
AirConnect  card  (see  www.wildpackets. 
com/products/airopeek  for  the  full  list, and 
don’t  be  misled,  the  Agere  Orinoco  card  is 
supported  only  under  W2K  —  WildPackets 
doesn’t  make  that  clear  until  you  get  to  the 


download  page). 

The  hardest  part  of  getting  AiroPeek  to 
run  was  getting  a  supported  PC  card  to 
work  properly.  We  tried,  for  a  dang  long 
time,  to  get  an  Intel  Pro/Wireless  201 1  card 
running  and  can  now  say  conclusively  that 
we  would  happily  defenestrate  (see  www. 
dictionary.com/wordoftheday/archive/ 
2000/01/25.html)  the  Intel  product  man¬ 
agers  responsible  if,  for  some  reason,  they 
were  to  visit  and  if  our  office  wasn’t  on  the 
ground  floor . . .  but  we  digress. 

Once  you  have  a  working  802.11b  card 
and  have  installed  the  AiroPeek  software, 
you  need  to  install  a  special  NDIS  driver 
from  WildPackets  to  control  the  network 
adapter  and  enable  packet  capture.  Here’s 
one  of  the  few  unsatisfactory  parts  of  the 
AiroPeek  installation  process  —  the  addi¬ 
tion  of  the  NDIS  driver  could  be  much  bet¬ 
ter  documented. 

So  what  does  AiroPeek  do?  A  better  ques¬ 
tion  (at  least  in  the  realm  of  wireless  proto¬ 
col  analysis), would  be  what  doesn’t  it  do? 

First  of  all,  unlike  Netstumbler,  which  we 
covered  a  few  weeks  ago  (www.nwfusion. 
com, DocFinder: 6837) .AiroPeek  isn’t  about 
trying  to  find  networks. While  AiroPeek  can 
scan  for  wireless  LANs  by  cycling  around 
the  802.1  lb  channels  (and  you  can  config¬ 
ure  which  channels  AiroPeek  looks  at  and 
how  long  should  be  spent  on  each  one),  it 
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A  roundup  of  the 
latest  neat  stuff 

Compiled  by 
Keith  Shaw 


Lexmark  launches  workgroup  printers 

Lexmark  recently  announced  new 
workgroup  printers  and  multifunction 
devices.  The  C750  and  C910  color  print¬ 
ers,  and  E320  and  E322  monochrome 
laser  printers  aim  to  bring  high-perfor¬ 
mance  printing  to  workgroups  at  a  lower 
price.  Lexmark  also  announced  the  X820e 
multifunction  device,  a  45-page-per- 
minute  printer  that  can  integrate  into  a 
company’s  directory  and  can  let  users 
securely  fax  or  e-mail  hard-copy  docu¬ 
ments  to  multiple  destinations. 

The  C750  and  C910 
are  designed  for 
workgroups,  and 
can  print  up  to  20 
pages  per  minute 
in  monochrome 
and  color.The  C750 
offers  letter-sized 
printing,  and  the 
C910  supports  11- 
by-17-inch  printing. 

The  E320  and  E322 , 
monochrome  laser 
printers  are  aimed 
more  at  consumers 
or  remote  office 


>» 

Lexmark  X820e 


workers,  and  can  print  up  to  16 
pages  per  minute. 

The  C750  costs  from  $3,000  to 
$4,900  (depending  on  model); 
the  C910  from  $4,000  to  $6,250 
(also  depending  on  model). 

The  E320  and  E322  mono¬ 
chrome  laser  printers  cost 
from  $300  to  $600.  The  X820e 
costs  $13,000.  Head  to  www. 
lexmark.com  for  more  infor¬ 
mation  on  the  new  printers. 

Don't  feel  blue'  about  new 
Kyocera  phone 

Sprint  PCS  and  Kyocera  have 
released  the  dual-band  Kyo¬ 
cera  2255,  a  stylish  new  phone 
with  a  bright  blue  backlight. 

According  to  Sprint,  whenever 
a  button  is  pressed  on  the 
phone,  it  glows  blue.  But  the 
phone,  which 
costs  $130,  also 
has  some  high¬ 
er-end  features  such  as 
automatic  volume  con¬ 
trol,  voice-activated  dialing 
and  multilingual  display 
*  (English  and  Spanish).  Pro¬ 

ductivity  tools  include  voice 
memo,  alarm  clock  and 
countdown  timer,  calculator 
and  tip  calculator, stopwatch 
and  a  contact  directory. 

The  2255  includes  four 
embedded  games,  15 
ringtones  (and  a  vibrate 


isn’t  really  designed  for 
the  task.  AiroPeek  is 
for  analyzing  in  depth 
what  you  have. 

AiroPeek  monitors  a 
specific  channel  and 
reports  on  data  rates, 
error  rates,  addresses 
seen  and  their  activity; 
captures  all  802.1  lb  control, data  and  man¬ 
agement  frames;  decodes  and  reports  on 
protocols  in  use  (TCP/1R  AppleTalk,  Net¬ 
BEUI  and  IPX);  and  performs  statistical 
analysis  of  all  traffic  or  filtered  sets  of  cap¬ 
tured  packets. 

There’s  also  excellent  support  for  user- 
definable  alarms, triggers  and  notifications, 
and  you  can  customize  the  output  of  statis¬ 
tics  and  generate  reports  in  HTML,  XML  or 
text. 

When  you  start  a  packet  capture  ses¬ 
sion,  you  can  filter  and  select  packets  in 
real  time,  save  any  or  all  of  the  capture, 
and  filter  according  to  protocol,  source, 
destination,  conversation,  nodes  or  any 
custom  criteria  you  please.  You  can  also 
decode  packets,  graph  utilization  and 
packet  size  distribution. 

The  triggers  we  mentioned  earlier  are 
really  neat  —  you  can  define  an  event 
to  initiate  and  stop  capturing  packets  as  a 
combination  of  specific 
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dates  and  times  as  well  as 
for  specific  protocols. 

Alarms  can  also  be  con¬ 
figured,  for  example,  to 
send  an  informational 
alert  by  email  whenever 
the  error  rate  exceeds 
more  than  100  errors  per 
second  for  30  seconds, 
and  then  a  resolution  message  when  the 
rate  drops  below  50  errors  per  second  for 
60  seconds.The  alternatives  to  e-mail  are  to 
run  a  program, call  a  pager, add  a  log  entry 
or  play  a  sound. 

And  then  there  are  external  modules 
that  provide  expert  analysis  of  packets. 
These  plug-ins  include  finding  and  log¬ 
ging  duplicate  IP  address  use,  verifying 
packet  checksums,  logging  Web  and  FTP 
usage,  and  (this  is  a  big  one)  detecting  a 
variety  of  hack  attacks.  You  can  enable 
plug-ins  in  real  time  to  handle  packets 
as  they  are  being  captured  or  at  a  later 
time. 

There  is  so  much  to  this  program  we  can’t 
begin  to  do  it  justice  in  a  short  column.At 
$2,000,  it  is  an  expensive  tool,  but  if  you’re 
serious  about  deploying  wireless  networks, 
you  will  need  AiroPeek,  which  garners  a 
solid  nine  gearteeth. 

Yours  decodes  to  gearhead@gibbs.com. 


Kyocera  2255 


alert),  and  animated  screen 
savers.  It  weighs  about  4.3 
ounces.  For  more  informa¬ 
tion,  head  to  www.sprint 
pcs.com. 

Free  MP3  player  with 
Audible  subscription 

Audible.com  is  offering  a 
free  Diamond  Rio600  MP3 
player  if  you  sign  up  for  one 
of  the  company’s  Audible- 
Listener  programs.  It  offers 
two  programs,  BasicListener 
and  PremiumListener,  that  let 
you  download  audio  books 
from  its  Web  site.  The  Basic- 
Listener  package  lets  you 
download  one  audio  book 
and  a  one-month  periodical 
subscription  for  $13  per 
month;  the  PremiumListener 
package  lets  you  download 
two  audio  books  for  $16  per 
month. The  plans  require  a  one- 
year  commitment.  For  more  information, 
go  to  www.audible.com/freerio. 

RollerMouse  aims  to  relieve  arm  strain 

Contour  Design  has  launched  the 
RollerMouse  station, a  pointing  device  to 
offload  strain  and  tension  of  muscles 
around  the  shoulders  and  elbows.  The 
device  features  a  rollerbar  that  controls 
the  cursor,  and  can  be  manipulated  with 
thumbs  or  fingertips.  The  RollerMouse 
station  is  placed  under  the  space  bar  on 
a  keyboard,  which  can  eliminate  the 


RollerMouse  station 

repetitive  reaching  for  a  mouse.  The  de¬ 
vice  has  three  buttons  that  can  be  pro¬ 
grammed  to  perform  different  functions, 
and  an  additional  PS2  port  for  adding 
another  input  device, such  as  a  trackball. 
The  RollerMouse  station  works  with  PCs 
with  a  Universal  Serial  Bus  or  PS2  port, or 
a  Macintosh  with  a  USB  port.  It’s  recom¬ 
mended  for  use  with  101-key  “straight” 
style  keyboards.  The  device  costs  $190, 
and  can  be  ordered  through  Contours 
Web  site,  www.contourdesign.com. 

Bluetooth  access  point  launched 

Red-M  has  launched  its  1050AP  smart 
access  point,  which  can  connect  to  a  LAN 
to  provide  Bluetooth  connectivity  to  other 
Bluetooth-enabled  devices.  Red-M  is  hop¬ 
ing  the  access  point’s  $500  price  tag  will 
entice  companies  to  “try  out  Bluetooth" 
without  breaking  the  bank.  By  connecting 
the  device  to  a  wired  LAN,  the  1050AP  can 
offer  Internet  and  other  network  access  to 
devices  that  have  Bluetooth  connectivity 
(such  as  PDAs,  phones  and  printers).  Go  to 
www.red-m.com  for  more  information. 

Got  some  cool  stuff ?  Send  info  to 
kshaw@nwu>.  com. 
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HANDLE  IT? 


Infrastructure  a  tad  skimpy? 
Our  free  Web  seminar  can  fix  that. 


Is  your  infrastructure  scalable?  Which  application  architec¬ 
tures  are  the  most  flexible?  Does  your  hardware  maximize 
performance?  Before  you  answer,  consider  that  a  recent 
study  revealed  that  a  majority  of  Web  apps  and  servers 
failed  to  scale  when  tested  at  their  projected  capacity. 

Fortunately,  IBM  and  its  Business  Partners  can  help. 
IBM  offers  a  wide  range  of  complete  and  comprehensive 
solutions  to  enhance  the  performance  and  scalability  of 
your  mission-critical  e-business  infrastructures. 

Resources  such  as  IBM  Global  Services  help  identify 
and  eliminate  compromising  infrastructure  issues  that 
could  limit  performance.  Software  like  IBM  WebSphere® 
provides  a  platform  for  deploying  multiple  apps  at  once. 


And  hardware  like  IBM  (©server  w  ith  Capacity  on  Demand 
delivers  instant  growth  at  the  touch  of  a  button. 

To  learn  more  about  scalability,  including  mission- 
critical  e-business,  performance  strategies,  the  impact 
of  Java  and  Linux®  plus  trends  and  recommendations, 
click  into  our  Web  seminar.  It’s  absolutely  free— just 
take  a  few  seconds  and  register  online. 

This  30-minute  co-production  by  ITworld.com  and 
IBM  will  bring  you  up-to-date  information  on  the  people, 
hardware  and  software  that  can  help  you  plan  for  every¬ 
thing  your  system  may  require,  including  the  unexpected. 
It's  what  you  need  to  know  to  keep  your  infrastructure 
reliable,  scalable  and  — oh,  yeah  — looking  good. 


REGISTER  NOW  FOR  A  FREE  SCALABILITY  WEB  SEMINAR. 


(Go  ibm.com/e-business/expand  Q  1 800  IBM  7080,  ask  for  Expand 


(©business  infrastructure 
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EDITORIAL 

John  Dix 

Single  sign-on 
doesn’t  have  to 
be  difficult 


Budget  stretching 
strategies 


Asked  how  his  firm  is  coping  with  hard  times, a  reader 
from  a  large  New  York  firm  said  last  week  that  all  IT 
projects  are  on  hold  until  the  first  quarter  of  2002. 
The  only  projects  that  stand  a  chance  of  getting  funding 
are  those  that  1)  can  save  money,  or  2)  generate  revenue. 

Passlogix  is  offering  a  technology  that  fits  the  first  cate¬ 
gory:  a  single  sign-on  product  that  can  simplify  employee 
access  to  myriad  homegrown  applications  or  masses  of 
incompatible  back-end  systems. 

The  savings?  Fbtentially  huge,  particularly  in  shops  strug¬ 
gling  with  integration  nightmares  as  a  result  of  mergers  or 
acquisitions.  Passlogix  CEO  Marc  Boroditsky  says  he  knows 

of  one  company  with  35,000 
employees  that  spends  $3  mil¬ 
lion  per  year  just  to  maintain 
the  passwords  of  its  5,000  cus- 
tomer  service  agents. 

g  The  customer  service  folks 

need  to  be  able  to  access 
account  information  on  multi¬ 
ple  legacy  systems  left  over  from  a  string  of  mergers.  And 
security  policy  mandates  that  passwords  have  to  change 
every  30  days.  Result:  mayhem. 

That’s  where  Passlogix’s  v-Go  product  can  help.  Once 
loaded  onto  desktops,  it  runs  in  background  mode,  always 
on  the  lookout  for  procedures  and  routines  concerning 
passwords.  When  something  is  detected,  v-Go  completes 
the  procedure  without  the  user  even  knowing  it. 

The  same  applies  when  a  password  expires. V-Go  inter¬ 
cepts  the  prompt  and  inputs  a  new  password  without  in¬ 
volving  the  user. 

Having  the  software  on  the  client  means  Passlogix  does¬ 
n’t  have  to  wrestle  with  a  problem  plaguing  server-based 
single  sign-on  products:  the  need  to  customize  links  to  the 
resources  that  users  need  to  access.That  means  v-Go  can 
be  implemented  in  weeks  vs.  months,  Boroditsky  says. 

V-Go  runs  on  Windows  2000/NT,  Millennium  Edition, 98 
and  95,  as  well  as  NetWare.  It  works  with  any  Lightweight 
Directory  Access  Protocol-compatible  directory,  as  well  as 
with  popular  private-key  encryption  systems. 

Asked  if  v-Go  isn’t  a  security  threat  itself,  Boroditsky  said 
everything  is  encrypted  and  the  product  has  a  perimeter 
defense  that  watches  for  attachment  requests.  If  it  sees  any¬ 
thing  suspicious  it  shuts  those  processes  down. 

The  software  costs  $70  per  user,  plus  20%  for  mainte¬ 
nance  and  support. 

This  won’t  appeal  to  everyone,  but  there  might  be  groups 
within  your  company  that  could  benefit  immediately 


—  John  Dix 
Editor  in  Chief 
jdix@nivw.com 
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Orwellian  nightmare 

Regarding  Ira  Brodsky’s  column  “Build  our  secur¬ 
ity  infrastructure”  (www.nwfusion.com,  Doc- 
Finder:  6734):  What  part  of  “Big  Brother  is  watch¬ 
ing  you”  does  Brodsky  not  understand?  I’m  not 
normally  a  staunch  advocate  of  Internet  privacy 
issues.  It  seems  inevitable  to  me  that  those 
who  really  want  to  will  ultimately  be  able  to  find 
out  any  fact  that  interests  them,  privacy  legisla¬ 
tion  or  no.  But  it’s  a  fairly  long  way  from  that  sort 
of  laissez-faire  attitude  to  actively  aiding  and 
abetting  the  construction  of  the  sort  of  infrastruc¬ 
ture  that  could  make  George  Orwell’s  nightmare 
come  true. 

John  McCash 

Woodridge,  111. 

Voice-over-IP  variables 

In  her  story  “VoIP  variables”  (www.nwfusion.com, 
DocFinder:  6735),  Susan  Breidenbach  digs  below 
the  surface  of  conventional  wisdom  and  speaks 
to  a  range  of  companies  and  public  entities 
regarding  a  well-defined  circle  of  systems  and 
suppliers.  She  also  focuses  on  business  needs  and 
the  motivation  to  converge. The  result?  Instead  of 
“one  analysis  fits  all,”  you  get  comments  from  sev¬ 
eral  companies  about  what  compelled  them  to 
buy  from  their  vendors;  a  refreshing  differen¬ 
tiation  driven  by  business  case  instead  of  vendor 
positioning. 

Breidenbach  has  planted  the  seeds  for  a  new 
level  of  debate  well  beyond  the  classic  voice-over- 
IP  workability  and  baseline  performance  specula¬ 
tions  that  were  prevalent  only  a  year  ago.  As  a 
result,  readers  will  find  it  much  easier  to  ascertain 
the  impact  of  various  network  upgrade  and  redun- 

E-mail  letters  to  jdix@nww.com  or  send  them  to  John  Dix,  editor  in 
chief.  Network  World,  1 18  Turnpike  Road,  Southborough,  MA  01772. 
Please  include  phone  number  and  address  for  verification. 


dancy  requirements:  training:  applications;  mainte¬ 
nance,  and  even  architecture  issues  between  sys¬ 
tems;  and  what  that  might  mean  for  their  voice  net¬ 
work.  What  a  step  forward. 

IP  voice  is  about  to  challenge  many  more  estab¬ 
lished  rules  about  reliability  productivity  and  eco¬ 
nomics.  Perhaps  architecture  will  soon  replace  sig¬ 
nalling  technology  as  the  real  differentiator  for 
enterprise  voice  systems  now  that  IP  voice  is  being 
taken  seriously 

Gregory  Ness 
Director,  marketing  communications 
Shoreline  Communications 
Sunnyvale,  Calif. 

Back  it  up 

In  Frank  Dzubeck’s  column  “Corporate  America’s 
wake-up  call”  (www.nwfusion.com,  DocFinder: 
6737),  I  was  struck  by  his  comments  on  backing 
up  e-mail  and  contacts.  I  save  my  Outlook  com¬ 
plete  .pst  file  every  Friday  night  and  take  home  a 
zip  disk  with  it  as  my  archive/backup.  It’s  easy 
and  complete.  1  doubt  that  many  other  people 
do  likewise. 

Jim  Perry 
Director,  channel  marketing 
LuxN 

Sunnyvale,  Calif. 

More  on  security 

John  Cox’s  story  “Rethinking  wireless  LANs”  (www. 
nwfusion.com,  DocFinder:  6838)  is  a  good  analysis 
of  the  gotchas  of  this  emerging  technology  How¬ 
ever,  I  would  have  liked  more  details  on  the  secur¬ 
ity  aspects  of  wireless  LANs.  Network  World  should 
ding  manufacturers  for  not  shipping  devices  with 
security  enabled.  Shame  on  them! 

Rick  Smith 
*  Portland,  Ore. 


More  online!  www.nwfusion.com  Find  out  what  readers  are  saying  about  these  and  other  topics.  DocFinder:  6831 
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ON  THE  ROAD 

Sandra  Gittlen 


Don’t  go  it  alone  with  storage 


r 


t 


l  here’s  a  scene  in  the  movie  “Pretty 
Woman”  in  which  Julia  Roberts  goes 
into  an  expensive  dress  shop  with  a  wad 
of  cash  that  she  is  supposed  to  use  to  buy 
some  upscale  clothing.  She  has  the  money  to 
spend  but  has  no  idea  what  would  be  appro¬ 
priate  to  buy.  Having  just  wrapped  up 
Network  World’s  Storage  Town  Meeting  tour,  1 
get  the  sense  that  many  companies  are  fac¬ 
ing  a  similar  situation  with  storage. 

During  the  past  few  weeks,  fellow  modera¬ 
tor  Steve  Duplessie  and  I  have  traveled  to 
eight  cities  across  the  country  to  talk  about 
the  latest  developments  in  storage  network¬ 
ing  and  have  seen  the  urgency  of  this  topic  in  the  aftermath  of  Sept. 
1 1 .  From  feedback  forms  and  discussions  with  your  peers,  I’ve  learned 
that  education,  not  money  is  the  key  issue.  Even  the  sponsors  of  our 
tour  —  Blue  Arc,  Cisco,  Datacore, Veritas  and  JNI  —  acknowledge  that 
buying  and  installing  storage  equipment  can  be  incredibly  confusing. 

Do  you  go  with  a  pure,  storage-area  network  or  network-attached 
storage?  Their  answer:  You’ll  probably  need  a  combination  of  both. 
Do  you  use  virtualization  so  your  storage  network  can  be  a  mix  of  dif¬ 
ferent  vendors’  equipment?  Many  of  the  sponsors  on  our  panel  say 
virtualization  software  is  a  good  bet  so  that  you  don’t  have  to  start 


over  in  buying  and  building  out  your  networks.  How  much  data  do 
you  need  to  store  before  you  need  a  storage  network?  Our  panelists 
say  you  can  start  creating  a  solid  storage  infrastructure  by  network¬ 
ing  as  few  as  two  servers. 

But  the  most  pressing  question  on  everyone’s  mind  seems  to  be:  Do 
I  have  to  go  it  alone?  The  resounding  answer  from  our  panelists  is 
“no.”  In  fact,  they  all  agreed  that  hiring  an  integrator  is  the  best  bet  to 

make  sure  your  storage-equipment  dollars 
are  well  spent. 

I  talked  to  a  network  manager  for  a 
Midwestern  bank  who  said  he  got  approval 
from  his  company  to  spend  millions  of  dol¬ 
lars  to  create  a  storage  network.  He  went  out 
and  bought  top-of-the-line  equipment  and 
high-end  software.  But  when  it  came  time  to  install  everything,  he  real¬ 
ized  he  had  no  idea  what  servers  should  be  attached  to  the  network 
or  how  to  go  about  setting  policy  for  the  software.  He  sheepishly 
returned  to  his  corporate  purseholders  to  ask  for  more  money  to  bring 
an  integrator  on-site.  His  advice  to  his  peers:  Don’t  go  it  alone. 

Have  you  tried  to  build  your  own  storage  network?  How  did  it  go?  Let 
me  know. 

Gittlen  is  events  editor  for  Network  World’s  Seminars  and  Events 
Group.  She  can  be  reached  at  sgittlen@nww.com. 
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ABOVE  THE  CLOUD 

James  Kobielus 


f  ireless  LANs  are  becoming  an  impor¬ 
tant  piece  of  the  mobile  computing 
infrastructure.  But  for  enterprise  users, 
they  have  a  serious  shortcoming  that  could 
prevent  them  from  becoming  a  mainstream 
network  technology:  Wireless  LANs  only  oper¬ 
ate  within  a  narrow  geographic  range,  about 
150  feet  from  the  radio  frequency  transmitter.  When  users  take  their 
portable  computers  outside  the  wireless  LAN’s  limited  coverage  area, 
they  lose  the  signal,  the  connection  and  the  computing  session. 

Given  this  limitation,  it’s  no  surprise  the  industry  is  exploring  various 
approaches  to  enabling  transparent  roaming  between  wireless  LANs 
and  carriers’  wireless  data  services. The  most  encouraging  sign  is  that 
the  Wireless  Ethernet  Compatibility  Alliance,  the  vendor  consortium 
that  manages  the  Wireless  Fidelity  (WiFi)  standard  (known  as  802.1  lb), 
is  defining  a  standard  for  roaming  between  wireless  LANs  and  public 
wireless  data  networks.  Draft  specifications  from  the  Wireless  Internet 
Service  Provider  Roaming  (WISPr)  group  are  expected  by  year-end. 

It’s  not  yet  clear  what  functional  range  the  WISPr  specifications  will 
address,  but  the  group  needs  to  pay  attention  to  directory  interoper¬ 
ability  requirements.  A  well-connected,  federated,  multivendor  direct¬ 
ory  environment  should  be  central  of  any  future  WISPr  standard. 

For  starters,  the  WISPr  group  should  specify  a  roaming  architecture 
that  interoperates  with  the  “location  registry”  directory  features  already 
embedded  in  today’s  cellular  telephony  service  environments.  In  a  mo¬ 
bile  computing  environment,  we  would  want  our  subscriber  account 
information  to  follow  us  to  the  next  wireless  LAN  or  carrier  environ¬ 
ment  in  which  we  power  up  our  PDA.We  would  also  want  the  ability  to 
personalize  the  mobile  client  user  interface  in  keeping  with  identity 
and  profile  information  maintained  in  network-connected  enterprise 
and  service  provider  directories. 

The  WISPr  group  should  also  pay  attention  to  Lucent’s  recently  an¬ 
nounced  development  of  an  architecture  for  interoperability  among 
the  location  registry  infrastructures  of  heretofore  incompatible  cellular 
protocols.  Lucent’s  “Common  Operations”  architecture  defines  what 
might  be  called  a"metadirectory”service  for  bridging  location  registers 
between  Global  System  for  Mobile  Communications  (GSM),  Code 


Roaming  depends  on  directories 


Division  Multiple  Access  and  other  cellular  protocols. 

Another  wireless  LAN  roaming  approach,  introduced  by  Nokia,  also 
has  implications  for  the  distributed  directory  infrastructure.  Essentially 
Nokia’s  Operator  Wireless  LAN  product  turns  the  WiFi-based  LAN  into 
a  premises-based  microcell  on  the  carriers  GSM  network,  interoperat¬ 
ing  with  the  worldwide  GSM  location  registry  infrastructure. This  prod¬ 
uct  requires  portable  computers  to  use  a  Nokia-developed  WiFi  network 
interface  card  (NIC)  that  includes  an  onboard  GSM  Subscriber  Identity 
Module  (SIM)  card. The  WiFi/SIM  NIC  authenticates  the  WiFi  client  to  a 
Nokia  Authentication  Server  installed  on  premises  in  the  wireless  LAN 
environment.  For  this  product  to  work,  WiFi  LAN  operators  must  have 
established  interconnection  and  roaming  agreements  among  them¬ 
selves  and  with  GSM  carriers,  integrating  their  Nokia  Authentication 
Servers  with  carrier-based  location  registries  and  billing  systems. 

The  principal  shortcomings  of  Nokia’s  approach  are  that  it’s  propri¬ 
etary,  works  only  in  GSM  environments  and  doesn’t  support  multimode 
handoffs  between  the  WiFi  and  General  Packet  Radio  Service  (GPRS) 
airlink  protocols.  But  it  points  to  a  future  in  which  WiFi  is  the  standard, 
in-building,  mobile-data  microcell;  SIMs  are  embedded  in  client 
devices  in  all  wireless  environments;  and  the  SIM  (or  the  similar  WAP 
Identity  Module)  is  the  standard  carrier  of  credentials  for  authenticat¬ 
ing  to  all  cellular  location  registry  services. 

Another  important  feature  missing  from  Nokia’s  product  is  support 
for  wireless  VPN  functionality  Addressing  this  concern  are  vendors 
such  as  NetMotion  and  Ecutel  whose  wireless  VPN  products  lets  net¬ 
works  support  client  mobility  from  WiFi  to  GPRS  networks,  locate  the 
mobile  client’s  new  IP  address  on  the  GPRS  network  and  maintain  ses¬ 
sion  persistence  when  wireless  clients  are  out  of  range. 

Amid  all  this  activity  one  thing  is  clear:  Transparent  roaming  without 
well-connected  directories,  registries  and  other  identity  repositories  is 
not  feasible.  Directories  will  be  a  critical  component  of  whatever  ubiq¬ 
uitous  mobile-data  roaming  environment  emerges  from  this  period  of 
frenzied  innovation. 


In  a  mobile  com¬ 
puting  environ¬ 
ment,  we  would 
want  our  sub¬ 
scriber  account 
information  to 
follow  us  to  the 
next  wireless  LAN 
or  carrier  envi¬ 
ronment  in  which 
we  power  up  our 
PDA. 


Kobielus  is  a  senior  analyst  with  The  Burton  Group,  an  IT  advisory  ser¬ 
vice  that  provides  in-depth  technology  analysis  for  network  planners.  He 
can  be  reached  at  (703)  924-6224  or  jkobielus@tbg.com. 
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IxWeb. 

Unmatched  web  stress  testing. 
Millions  of  concurrent  web  sessions 

No  ifs,  ands,  or  clicks. 


IxWeb.  The  most  compact,  scalable,  fully  integrated  hardware/software  solution 

for  comprehensive  web  stress  testing. 


Performance  verification  of  local  and  global  server  load  balancers, 
web  servers,  firewall  algorithms,  session  cookie  tracking,  URL  and  SSL 
gap  switching  policies,  and  protection  against  Denial  of  Service  attacks 
*  Client  and  server  emulation  on  a  single  platform  •  Thousands  of 
;  |  •  users  and  millions  of  sessions  •  Full  wire-speed  FP6A  generated  Layer 
.  .  2  and  3  traffic  combined  with  real-world,  hardware  assisted,  Layer  4- 
7  session  emulation  •  Emulated  virtual  clients  browsing  the  internet 
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1  -877-FOR-IXIA  www.ixiacom.com 


and  Web  servers  processing  FITML  pages  •  Persistence  verification 
and  "stickiness"  for  shopping-cart  and  c-Commerce  applications  by 
generating  HTTP  1.0  and  HTTP  1.1  sessions  •  Hundreds  of  client  ports 
managed  from  one  centralized  console  •  Part  of  Ixia's  complete  fam¬ 
ily  of  optical  and  broadband  performance  analysis  tools:  10  Gbps, 
1  Gbps  &  10/100  Mbps  Ethernet  (over  copper  &  fiber),  0C-192c / 
48c/l2c/3c  Packet  Over  SONET,  and  0C-192c/48c  BERT 

In  Motion 

International  +1-818-871-1800 


- - -  In  this  age  of  doomsday 

H|  predictions,  every  good 
manager  has  learned  this 
truth:  You've  got  to  bal- 
¥  ance  the  bad  with  the 

- 1  good.  High  tech  may  be 

down,  but  networking  still  sports  a  crop 
of  worthy  new  products,  technologies 
and  management  strategies.  You’ll  find 
them  here,  in  this  Signature  Series  edi¬ 
tion,  our  third  annual  Best  Issue. 

Take,  for  example,  the  massive  tele¬ 
work  program  our  2001  User  Excellence 
Award  winner,  Prudential  Financial,  has 
launched  over  a  grand  VPN.  Turn  to  page 
63  for  a  profile  of  the  project,  as  well  as 
overviews  of  two  other  company-  and 
industry-transforming  projects. 

Of  course,  grand  network  plans  aren't 
built  on  ether  —  but  grand  technology. 
Naturally,  we  showcase  the  best  prod¬ 
ucts  on  the  network  circuit  today. 
Beginning  on  page  70,  we  tell  you  what 
products  rate  highest  among  you,  our 
readers;  testing  professionals;  and  our 
columnists.  In  all,  we  profile  more  than 
two  dozen  award-winning  products. 

In  these  pages  and  online,  you’ll  also 
find  expert  advice  on  building  stellar 
networks  and  developing  your  career. 
The  best  advice,  we’ve  found,  comes 
from  those  who  have  "been  there,  done 


STORIES 


58  Best  tips:  IP  technology 

Experts  share  their  secrets  for 
implementing  the  hottest  IP  network 
services,  from  clustering  to  VoIP. 


63  User  Excellence:  A  grand  telework  plan 

Prudential  Financial  wins  our  2001  User 
Excellence  Award  for  an  IP  VPN  project  that 
turned  it  into  a  telework  powerhouse  while 
cutting  remote  access  costs  in  half. 


66  User  Excellence:  Best  of  the  rest 

St.  Elizabeth’s  Hospital  and  the  Chicago 


Clearing  House  Association  are  runners-up  in 
our  2001  User  Excellence  Award  competition. 


that,"  such  as  those  featured  in  the  "Best 
tips:  IP  technology"  story  on  page  58.  We 
hope  you  find  a  few  gems  to  use  in  craft¬ 
ing  your  own  best  story. 


70  Best  products:  User  picks 

IBM  and  Cisco  remain  perennial  favorites 
while  Microsoft  lags  in  popularity  among 
readers  who  participated  in  our  third  annual 
Best  Products  survey. 


Beth  Schultz,  editor,  Signature  Series 
bschultz@nww.com 


BEST  ONLINE 


More  User  Excellence  Award  coverage 

Network  diagrams,  full  runners-up 
profiles  and  quick  hits  on  a  dozen 
honorable  mentions.  DocFinder:  6823 


Go  to  our  Best  Issue  portal,  at 
www.nwfusion.com/best2001, 
for  more  stories  and  special 
features,  including: 


73  Best  of  the  tests 

Thirteen  products  win  our  2001  Best  of  the 
Tests  Award  as  tops  in  their  tested  categories. 


Best  Products 

More  results  from  our  Best  Products 
reader  survey.  DocFinder:  6826 


The  best  books  of  2001 

A  rundown  of  the  latest  crop  of 
must-read  technology-related 
business  theories.  DocFinder:  6824 


79  Wares  extraordinaire 

Six  of  our  columnists  select  the  most 
innovative  products  and  services  for  our 
annual  Category-breaker  Award. 


Best  of  the  Tests  tips 

Hear  audio  from  Network  World  Test 
Alliance  members  sharing  their  secrets 
on  testing.  DocFinder:  6829 


10  reasons  networking  is 
the  best  career 

Network  professionals  tell  us  why. 
DocFinder:  6825 


85  How  to  avoid  burnout 

IT  execs  reveal  how  they  get  the  most  from 
their  staffs  without  turning  them 
V  to  toast. 


SERIES 


The  Best  Issue  is  one  of  six  bimonthly  supplements  providing  insights,  opinions  and  information  on  the  biggest  trends  shaping  the  networked  world.  ■  ’ 

Watch  for  the  Power  Issue,  our  annual  compilation  of  the  most  powerful  people,  companies  and  strategies  in  networking,  coming  Dec.  24/Dec.  31.  .  '  V' 
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With  Microsoft  Operations  Manager  2000  (MOM 
2000),  you  can  now  manage  more  Windows 
applications  from  a  centralized  console.  Simply 
put,  MOM  2000  makes  Windows  the  easiest 
platform  in  the  world  to  manage. 

NetIQ's  Extended  Management  Packs  (XMP)  for 

MOM  2000  extend  and  enhance  your  management 
capabilities  across  your  entire  heterogeneous 
environment  from  the  same  Windows  console.  So 
now,  large-scale  enterprise  platforms  like  Unix, 
NetWare,  Oracle,  Lotus,  and  even  third-party 


systems  management  products,  such  as  Tivoli  and 
Micromuse,  can  all  be  managed  through  Windows. 
Managing  your  enterprise  has  never  been  easier. 

As  Microsoft's  premier  Independent  Software 
Vendor  (ISV)  for  MOM  2000,  NetlQ  offers  the  ulti¬ 
mate  solution  for  managing  your  cross-platform 
e-business  environment.  Microsoft  and  NetlQ — 
connecting  flights  daily  to  your  entire  enterprise. 

Visit  us  at  www.netiq.com/manageability  or 
www.microsoft.com/mom  for  more  infoirmatidn. 
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IP  TECHNOLOGY 

Experts  share  their  secrets  for  implementing  the  hottest  IP  network 

services,  from  clustering  to  VoIP. 


Phas  arguably  changed  the  net¬ 
worked  world,  allowing  the 
gradual  reshaping  of  enter¬ 
prise  architectures  with  tech¬ 
nologies  such  as  voice  over 
IP  VPNs  and  storage-area  net¬ 
works.  Not  so  long  ago  just  on  the  fringes,  these  IP 
technologies  are  quickly  moving  into  the  main¬ 
stream.  And  as  they  do,  a  growing  number  of  net¬ 
work  professionals  and  industry  experts  can  say, 
“Been  there,  done  that.”  What  follows  are  some 
insider  tips  on  the  best  ways  of  implementing  the 
ever-more  popular  technologies  of  the  IP  world  — 
voice;  VPNs;  intrusion  detection  and  other  security 
technologies;  server  clusters;  and  SANs. 

Views  on  VoIP 

Voice  over  IP  which  carries  voice  traffic  on  IP 
packet  networks,  has  been  touted  as  a  more  cost- 
effective  alternative  to  circuit-switched  telephones. 
Yet  only  recently  have  companies  started  to  take 
the  plunge.  As  they  have,  they  often  learn  a  hard 
lesson:  While  standards  supporting  the  technology 
have  matured  considerably,  compliance  among 
vendor  equipment  has  not. 

The  main  culprit  is  quality  of  service  (QoS), 
which  is  required  across  an  entire  organization  to 
avoid  choppy  or  incomplete  voice-over-IP  trans¬ 
missions.  Unfortunately,  slight  differences  in  how 


BY  BRETT  MENDEL 

each  vendor  implements  the  IEEE’s  QoS  standard, 
802.1Rcan  force  network  executives  to  use  a  sin¬ 
gle  vendor’s  hardware.  Combine  that  with  older 
routers  that  don’t  support  the  standard,  and  the 
unsuspecting  project  manager  could  be  faced 
with  an  expensive  upgrade. 

“If  you’re  implementing  a  packet  telephony  pro¬ 
ject,  you’re  not  necessarily  replacing  just  a  PBX,” 
says  Brian  Riggs,  an  analyst  at  Current  Analysis. 
“You’re  also  potentially  phasing  out  a  majority  of 
your  datacom  infrastructure.” 

But  the  secret  from  those  who’ve  been  there  is 
that  workarounds  exist,  at  least  for  companies 
that  don’t  adhere  to  recognized  standards  on  all 
their  network  equipment,  Riggs  says.Those  com¬ 
panies  can  use  virtual  LANs  to  segregate  voice 
and  data  traffic  on  the  network,  so  the  former 
could  be  run  in  a  homogenous  setup  and  the 
latter  remain  on  heterogeneous  systems. 

Another  important  tip  from  those  experienced 
with  voice  over  IP  has  more  to  do  with  interper¬ 
sonal,  rather  than  technological,  communica¬ 
tions.  If  you  thought  regional  Bell  operating  com¬ 
panies  were  uncooperative  with  troubleshooting, 
wait  until  your  provider  realizes  it  will  soon  lose 
you  as  a  hefty  voice  customer,  laments  Daryl  Mc¬ 
Daniel,  CIO  of  Western  Heights  Public  School  Dis¬ 
trict  in  Oklahoma  City. 

While  Western  Heights’  local  carrier  offered 


some  help  in  the  early  stages  of  the  district’s 
voice-over-IP  implementation,  it  practically  van¬ 
ished  when  the  district’s  motives  became  clear. 
McDaniel  recommends  that  voice-over-IP  project 
managers  avoid  disclosing  the  reason  for  their 
queries  until  absolutely  necessary 

McDaniel  says  to  anticipate  significantly  more 
delays  than  usual  in  RBOC  responses  —  even 
before  the  tell-all  moment  —  and  build  that  into 
the  project  timeline. This  is  especially  important 
when  voice  traffic  needs  to  be  converted  from 
the  RBOC’s  circuit-switched  network  to  the  com¬ 
pany’s  packet-switched  network.  Project  staff 
could  have  to  test  and  decipher  the  networks’ 
correlating  frame  types,  and  perhaps  even  in¬ 
form  the  RBOC  how  to  configure  its  switches 
and  the  equipment  bridging  the  two  networks. 

“Sometimes  we  had  to  go  down  to  [the  RBOC] 
office  in  person  and  work  our  way  up  the  food 
chain  to  get  the  equipment  properly  configured,” 
McDaniel  says.“I  never  thought  it  would  be  that 
hard  to  work  with  them.” 

% 

VPN  watch  points 

VPN  technology,  another  datacom  cost-cutter, 
is  expanding  from  use  in  single-user  remote- 
access  configurations  to  deployment  for  site-to- 
site  connections.  While  installation  concerns 
have  eased  as  VPN  technology  has  matured, 


TIPS  FOR  SETTING  UP  A  WIRELESS  UN 


hough  wireless  LANs  have 
been  around  for  years,  new  high¬ 
er-speed  options  are  making  this 
technology  inch  closer  to  the  mainstream. 
Network  executives  who  have  deployed  wire¬ 
less  networks  have  several  tips  for  others. 

►  ►Use  virtual  LANs  (VLAN).  Wireless  net¬ 
works  can  be  a  godsend  for  companies  that 
have  users  who  need  to  move  around  a  site 
and  maintain  network  access. To  make  that 


process  transparent,  all  wireless  access 
points  within  the  campus  should  be  con¬ 
tained  within  a  VLAN  so  users  don’t  have  to 
reestablish  a  connection  and  log  on  again 
whenever  they  roam,  says  Paul  Forbes,  net¬ 
work  engineer  at  Trimble  Navigation,  a 
provider  of  Global  Positioning  Systems  in 
Sunnyvale,  Calif. 

►  ►  Beef  up  a  wireless  LAN’s  default  authen¬ 
tication.  Ongoing  discoveries  of  security 
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flaws  underscore  that  wireless  LANs  are  far 
from  secure.  "A  lot  of  wireless  hardware 
comes  unprotected  by  default  and  passes 
information  that  can  be  easily  intercepted,” 
says  Jeffrey  Fritz,  principal  network  engineer 
at  West  Virginia  University  in  Morgantown. 

Likewise,  wireless  encryption  protocols  are 
relatively  easily  to  decode,  experts  say. 
Wireless  network  designs  and  performance 
metrics  should  account  for  the  additional 
security  you’ll  need,  such  as  VPNs,  Remote 
Authentication  Dial-In  User  Service 
(RADIUS)  or  public-key  infrastructure  (PKI) 


:  Mite® 


maintenance  can  still  be  nettlesome, experts  say. 
Fluctuations  in  Internet  performance  make  traffic 
analysis  an  endless  pain,  for  instance. 

“It’s  really  critical  to  monitor  your  [service]  pro¬ 
viders  performance,  either  with  tools  or  through 
third-party  vendors  not  affiliated  with  your  pro¬ 
vider,”  says  Paul  Forbes,  network  engineer  at  Trim¬ 
ble  Navigation,  a  provider  of  Global  Positioning 
Systems  in  Sunnyvale,  Calif. 

Trimble  relies  on  VPNs  to  connect  15  satellite 
offices  with  roughly  300  users.lt  plans  on  adding 
another  15  remote  offices  and  their  700  users  in 
the  first  quarter  2002. 

With  the  potentially  erratic  Internet  and  latency- 
sensitive  applications, diligent  monitoring  —  with 
off-the-shelf  software  that  uses  network  probes  or 
generates  synthetic  transaction  scenarios  —  be 
comes  even  more  necessary  for  those  who  need 
to  watch  budgets  and  generate  performance  data 
quickly,  Forbes  says. To  ease  performance  con¬ 
cerns,  Forbes  also  recommends  relying  on  a  sin¬ 
gle  provider  capable  of  servicing  all  remote  of¬ 
fices.  This  reduces  latency  and  improves  through¬ 
put  over  a  multiple-provider  setup. 

When  VPNs  are  used  for  remote  users,  beware 
of  the  standards-compliance  bugaboo  similar  to 
the  one  that  trips  up  voice  over  IP  The  various 
components  of  VPN  clients  —  everything  from 
Ethernet  cards  to  drivers  —  might  sport  differing 
implementations  of  the  IP  Security  encryption 
standard  and  therefore  might  not  work  well 
together, says  Mark  Schertler,  director  of  network 
security  services  at  Primitive  Logic. 

Getting  client  communications  hardware  and 
software  to  work  with  IP  stacks  in  the  client  op¬ 
erating  system  can  prove  especially  arduous, 
Schertler  notes.  He  advises  IT  staffs  to  perform  rig¬ 
orous  compatibility  testing  among  the  various 
client  components  and  to  devise  a  common  plat¬ 
form  for  distribution  to  remote  users. 

The  most  stable  VPN  platforms  use  Microsoft’s 
Windows  2000  operating  system,  says  Richard 
Rerez, security  manager  at  MyFbints.com,  an 
e-commerce  services  company  in  Schaumburg,  Ill. 
Win  2000  offers  a  more  refined  TCP/IP  stack  than 
its  predecessors  and  the  ability  to  make  changes 
to  system  settings  without  rebooting.  Plus,  he  says, 
makers  of  VPN  client  software  are  building  and 
testing  their  products  better  for  Win  2000  than 
they  are  for  the  older  operating  systems. 

Intrusion  detection  and  other  musts 

Of  course, security  concerns  come  hand  in 
hand  with  deployment  of  any  ’Net-based  tech- 


systems  for  mobile  clients.These  technologies 
may  reduce  performance  on  the  wireless  network. 

►  ►Establish  usage  policies. Wireless  access 
point  equipment  has  become  affordable  for 
users,  who  may  buy  and  install  the  gear  on  their 
own.  Other  than  deploying  a  VPN,  RADIUS,  PKI 
or  other  authentication  mechanism  to  prevent 
unauthorized  access,  network  executives  should 
be  leery  of  leaving  users  to  their  own  devices. 
‘‘You  really  need  to  police  users  and  educate 
them  on  how  to  follow  the  policies  for  using  the 
wireless  network,"  Fritz  says. 

—  Brett  Mendel 


A  must  for  VoIP  projects:  Work 
longer-than-usual  RBOC  delays 
into  the  implementation  timeline. 
—  Daryl  McDaniel  ^ 

CIO,  Western  Heights  Public  School  District. 
Oklahoma  City 


nologies.  Likewise,  security  plans  must  be  an  inte¬ 
gral  part  of  any  network  architecture.  (See  story 
at  left  for  tips  on  wireless  network  security.) 

While  firewalls,  proxies  and  encryption  have 
become  standard  network  design  fixtures,  moni¬ 
toring  remains  sorely  neglected,  Perez  says.  As  bor¬ 
ing  and  painstaking  as  the  task  seems,  consistently 
analyzing  logs  in  firewalls,  routers  and  other  edge 
equipment  will  give  managers  a  guidepost  for 
identifying  normal  traffic  and  signs  of  attack. 

When  a  hacker  group  in  China  recently  made 
port  sweeps  across  the  Internet  to  search  for  sec¬ 
urity  holes,  Perez’s  traffic  logs  showed  the  group 
was  looking  for  entry  into  his  network  through  a 
printing  service.  Perez  took  preventive  measures 
after  spotting  the  odd  probe.  A  few  weeks  later, 
hacks  occurred  around  the  ’Net  through  the  same 
service  Fterez  identified. 

“1  hold  those  logs  very  dear  to  me,”  Perez  says. 

Network  managers  should  also  avoid  some 
common  mistakes  when  implementing  firewall 
security,  Schertler  says.The  first  is  opening  a 
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range  of  firewall  ports  to  a  particular  application, 
so  that  any  client  can  access  the  application. This 
defeats  the  purpose  of  a  firewall,  he  says,  which 
should  be  used  to  limit  the  number  of  ports  and 
users  that  can  access  particular  applications. 

Secondly,  many  administrators  fail  to  make  im¬ 
mediate  changes  to  a  firewall’s  default  user  identi¬ 
fications  and  passwords,  which  are  widely  known 
in  the  hacker  community.  Keeping  these  default 
settings,  even  just  temporarily  lets  outsiders  pry  in¬ 
to  the  network  using  the  firewall’s  system  or  root 
user  information. 

Schertler  and  others  also  advocate  implementing 
an  intrusion-detection  system  (IDS).  Inti usion  de¬ 
tection  monitors  inbound  and  outbound  traffic  to 
identify  any  suspicious  activity  on  the  network. 

“If  your  firewall  has  been  hacked,  well,  you  won’t 
even  know  the  hacker  is  there,”  Schertler  says. 

Users  who  have  network  access  through  intra¬ 
nets  or  extranets,  or  anyone  who  enters  a  network 
through  a  VPN  connection,  can  easily  launch 
denial-of-service  attacks,  adds  Tere  Bracco,  director 
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of  network  management  at  Current  Analysis. 

'Intrusion  detection  is  not  a  big, expensive 
investment,  but  it’s  still  something  that  most  enter¬ 
prises  don’t  address  until  it’s  too  late,”  she  says. 

One  secret  for  successful  use  of  an  IDS  is  to  keep 
its  focus  narrow.  Configuring  an  IDS  to  scan  most  or 
all  of  a  network  can  be  tempting,  but  it  could 
cause  too  big  of  a  performance  hit  and  should  be 
avoided,  Schertler  advises.  Instead,  the  IDS  should 
focus  on  the  applications  and  systems  of  most 
importance  to  the  company  Where  external  secur¬ 
ity  threats  are  a  concern,  an  IDS  should  monitor 


network  access  points  for  immediate  detection  of  a 
compromised  network. 

Of  server  clusters  and  SANs 

As  a  company’s  reliance  on  its  network  grows, 
server  farms  are  increasingly  the  design  method 
of  choice  to  handle  mounting  data  loads.  De¬ 
signing  flawless  clustering  is  the  pressure  point. 
And  flawless  clustering  can  only  come  when  net¬ 
work  architects  thoroughly  understand  the  appli¬ 


cations  in  use,  experts  say  Some  applications 
can't  operate  in  a  distributed,  multithreaded  envi¬ 
ronment  and  therefore  symmetric  multiprocess¬ 
ing  (SMP)  servers  are  a  waste  of  money 

“CPUs  are  good,  but  more  CPUs  aren’t  necessar¬ 
ily  better,”  says  Steve  Shah,  manager  of  technical 
marketing  at  ClickArray  Networks. 

Verify  that  software  is  multithreaded  by  compar¬ 
ing  the  application’s  performance  on  single-  and 
double-CPU  machines.To  determine  whether  the 
multiprocessor  server  is  distributing  the  data  load 
properly,  run  the  application  on  each  server,  gener¬ 
ate  a  load  against  it 
and  watch  CPU  utiliza¬ 
tion. The  number  of 
transactions  per  sec¬ 
ond  handled  by  each 
server  —  viewable 
through  the  vmstat  tool 
in  Unix  or  the  perfor¬ 
mance  monitor  under  the  Windows  Task  Manager 
in  Windows  —  should  increase  in  direct  propor¬ 
tion  to  the  number  of  processors.  A  dual-CPU  mac¬ 
hine  should  handle  nearly  if  not  exactly  twice  as 
many  transactions.  Otherwise,  several  single-CPU 
servers  might  offer  better  performance  than  one 
large  SMP  server. 

On  the  other  hand,  multithreaded  processing 
may  not  be  a  performance  panacea  either. 

“A  common  misconception  is  that  more  threads 


jf  Intrusion  detection  is  not  a  big,  expensive  investment,  but  its  still 
something  that  most  enterprises  don’t  address  until  it’s  too  late.” 
—  Tere  Bracco.  director  of  network  management  at  Current  Analysis 


means  more  performance,”  Shah  says. 

However,  more  threads  also  add  more  over¬ 
head,  which  can  lead  to  diminishing  returns.To 
assess  that  threshold,  run  an  application  on  the 
server  and  add  one  thread  at  a  time  until  the 
application  consumes  100%  of  the  CPU,  monitor¬ 
ing  with  the  operating  system  tools  previously 
mentioned.You  only  need  enough  threads  to 
keep  the  CPU  busy  100%  of  the  time,  he  says. 

Understanding  how  certain  applications  inter¬ 
act  in  a  given  system  will  also  help  you  design 
great  SANs.  Commonly,  improperly  deployed  ser¬ 
vers  running  NT  can  jeopardize  data  integrity  or 
even  paralyze  the  SAN  itself,  says  Joe  Furmanski, 
manager  of  systems  and  planning  at  UPMC 
Health  System  in  Pittsburgh. 

Because  NT  is  designed  to  allocate  available 
storage  to  the  server  on  which  it  resides,  SAN  ser¬ 
vers  installed  with  the  operating  system  must  be 
cordoned  off  through  zoning  or  logical  unit  num¬ 
ber  (LUN)  masking.  Zoning  refers  to  rules  applied 
in  a  SAN  switch  that  tell  ports  which  storage 
devices  they  can  access;  masking  lets  servers  see 
specific  LUNs  within  the  storage  devices  while 
hiding  others. 

“It  wouldn’t  be  cool,”  Furmanski  says, “if  you 
reboot  a  server  and  the  data  wasn’t  there.” 

Mendel  is  a  freelance  writer  in  San  Francisco.  He 
can  be  reached  at  brett@mendel.net. 


A  VStripper 


The  first  anti-virus  appliance  that 
strips  viruses  from  all  major  protocols 


Featuring 

♦  Quick  and  easy  install  -  no  time  consuming  integration, 
change  to  network  infrastructure  or  costly  implementation 

♦  Auto  update  of  virus  definitions  and  engine  every  3  hours 

♦  Network  administrator  alerts  for  virus  activity 

♦  Scalable  for  businesses  of  any  size 

♦  l  imit  corporate  liability  with  outbound  scanning 

♦  Minimize  risk  of  data  destruction  at  the  desktop  and  server  level 
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The  above  diagram  is  representative  of  a  sample  network 
with  multiple  layers  of  AVStripper  perimeter  protection. 


Powering  Internet  Managements  888-946-7769  ♦  www.ositis.com/avstripper 


The  most  effective  method  of  network  virus  control  ever  introduced, 
the  AVStripper  bridge  creates  a  perimeter  of  defense  around  the 
entire  network  and  removes  viruses  from  HTTP  (including  Java  and 
ActiveX),  FTP,  Socks,  SMTP,  POP3,  IMAP4,  NNTP  (News),  and  Instant 
Messenger.  AVStripper  stops  Nimda,  Code  Red,  Sircam,  I  Love  You, 
Melissa,  Anna  Kournikova  and  more... 


f|  °  AVStripper 
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Inspected  by  our  partners 
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Software  Technologies  Ud.  Network  Appliance*  NETSCREEN 


LAUNDRY  INSTRUCTIONS 


1 .  Install  filter  with  your  firewall, 
cache  engine,  or  proxy  server. 

2.  Forget  about  it. 


Websense  is  the  simplest,  most  transparent  Web  filtering  tool  around. 
And  the  most  recommended.  Ask  your  systems  integrator.  Ask  your 
consultant.  Heck,  call  our  partners  direct.  You'll  find  out  why  Websense 
is  installed  in  companies  as  small  as  50  people,  yet  covers  more 
than  250  Fortune  500  firms.  Comprehensive  reporting.  Automatic 
nightly  updates.  Scalability  up  to  100,000  users.  And  filtering  flexibility 
to  satisfy  your  CEO's  every  quirk.  Best  of  all,  it's  self-cleaning.  So  you  won't 
have  to  get  your  hands  dirty.Try  it  at  www.websense.com. 


EMPLOYEE  INTERNET  MANAGEMENT 


NASDAQ:  WB 


ClearTrust 


Authorization 
From  The 
Most  Trusted 
Name  in 

e-SECURITY" 

To  deliver  on  the  promise  of  e-business,  you  need  a  complete,  trusted 
online  environment.  This  means  knowing  who  you're  doing  business 
with  and  giving  them  access  to  the  right  resources.  That's  where  authori¬ 
zation  comes  in.  Authorization  empowers  organizations  to  safely  push 
their  business  processes  out  of  the  back  office  and  onto  the  Web,  where 
they  can  be  accessed  by  employees,  customers  and  partners.  Unleashing 
dramatic  cost  savings,  improved  customer  service,  stronger  relationships 
and  faster  response  to  a  rapidly  changing  business  environment. 

When  you're  ready  for  an  authorization  solution,  you  need  a  partner  you 
can  trust.  More  than  8,000  organizations  already  trust  R5A  Security  to 
deliver  e-security  solutions.  RSA  ClearTrust®  is  our  privilege  management 
and  user  access  solution  that  can  meet  your  authorization  needs.  To 
learn  more,  contact  RSA  Security,  the  most  trusted  name  in  e-security, 
at  800-495-1095  or  www.rsasecurity.com/go/cleartrust. 


RSA 
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Products  displaying  this  symbol  contain  or  are  compatible 
**th  the  world's  best  e-secunty  technologies  and  products 


SECURITY 

The  Most  Trusted  Name  in  e-Security 


www.rsasecurity.com/go/cleartrust 


Free  white  paper! 

"Authorization:  Unified  Privilege  Management  Solutions  for  Secure  e-Business' 


RSA.  OearTrust.  the  RSA  Secured  logo.  'The  Mom  Trusted  Name  m  e- Security’  and  the  RSA  Security  logo  are  trademarks  or  registered  trademarks  or  RSA  Security  Inc  All  other  trademarks  are  property  of  their  respective  owners.  02001  RSA  Security  Inc.  Ail  rights  reserved 
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BEST  USER  NETWORKS 


TELEWORK  PL 


Prudential  Financial  wins  our  2001  User  Excellence  Award  for  an  IP  VPN  proj 
turned  it  into  a  telework  powerhouse  while  cutting  remote  access  costs  in 
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ach  year,  Network  World  honors 
user  organizations  that  demon¬ 
strate  exceptional  use  of  net¬ 
work  technology  to  further  business 
objectives.  We  seek  projects  that  stand  as 
examples.They  may  adapt  mainstream 
technologies  creatively  or  apply  newer 
infrastructure  technologies  to  solve  press¬ 
ing  business  problems.These  projects  cre¬ 
ate  extraordinary  business  cases,  illus¬ 
trating  how  technology  leads  to  vast  sav¬ 
ings,  new  opportunities  or  sizable  income. 

Prudential  Financial  earned  our  top 
honor  in  the  2001  User  Excellence  Award 
competition  for  one  of  the  largest  internal 
IP  VPN  projects  ever  tackled,  with  nearly 
25,000  users.This  new  network  not  only 
nets  the  company  $7  million  annually  (and 
growing)  in  savings,  but  also  morphed  the 
corporate  culture  into  a  telework  icon. 
Prudential  has  even  created  a  private 
DSL  network  for  its  telework  force,  com¬ 
plete  with  service-level  agreements. 

Several  other  organizations  also  won  our 
acclaim,  including  St.  Elizabeth's  Hospital 
in  Belleville,  III.,  and  the  Chicago  Clearing 
House  Association.  Both  demonstrate 
smart  use  of  network  technology  while 
saving  their  users  time  and  cash.  Read  an 
overview  of  these  projects  on  page  72,  and 
visitThe  Best  Issue  portal  (www.nwfusion 
.com/best2001)  for  details.  While  there, 
peruse  the  nearly  two  dozen  projects  that 
won  Honorable  Mention  status. 

Use  DocFinder:  6823. 
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VPN  magnates 

Robert  Picciritlo.  vice  president  of  field 
infrastructure  lleftl.  and  Ed  Mann,  vice 
president  of  network  planning, 
lord  over  Prudential  Financials 
award-winning  VPN  project 


hen  Prudential 
Financial  decided 
to  create  an  IP 
VPN,  it  figured  it 
would  cut  annual 
remote  access  charges  by  a  hefty 
50".>.  and  that  was  reason  enough 
to  give  a  green  light  to  the  project. 

But  as  the  financial  services 

r 

company  pioneered  one  of  the 
nation's  largest  VPN  projects, 
completed  this  year  when  the 
majority  of  its  25.000  telecommut¬ 
ing  employees  and  business  part¬ 
ners  switched  over,  it  realized 
that  the  VPN  had  become  more 
than  a  mere  cost-cutting  exercise. 
Thanks  to  the  new  network,  a 
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"virtual  enterprise"  concept  now 
prevails  at  Prudential. 

The  company  can  attract  and 
hire  employees  who  want  to 

work  from  home,  need  to  work 
.  •  •'  .  •> 
closer  to  customers,  or  are  physi¬ 
cally'  unable  to  withstand  a  daily 
commute.  T  hrough  the  VPN, 
these  telecommuters  can  access 
the  same  database  information 
they  have  at  the  office  with  a 
high-speed  connection  and  set  up 
connected  sides  offices  in  the  V 

field  that  can  be  built  up  and 
taken  down  in  boors. 

Prudential  also  negotiated  a 
deal  for  business-class  DSL  ser-  /!■. 
vices,  letting  serious  telecom- 


rruiters  get  voice  over  IP  on  their  broadband  con¬ 
nections  and  have  extensions,  just  as  they  would 
in  a  traditional  office. 

Prudential  Financial  wins  Network  World’s  2001 
User  Excellence  Award  for  the  scale  of  this  VPN 
project,  its  immense  return  on  investment,  the  cre¬ 
ative  acquisition  of  DSL  services  and  the  impact 
it  has  had  on  the  company’s  corporate  culture. 

Reining  in  remote  access  charges 

Prudential’s  VPN  began  to  take  shape  in  1999, 
when  the  company  realized  it  could  reduce  its 
annual  $14  million  remote  access  bill  by  moving 
from  a  private  network  to  an  IP  VPN.  And  with  the 
voice-over-IP  option,  Prudential  also  planned  to 
move  help  desk  personnel  onto  the  new  network. 

At  the  time,  employees  and  business  partners 
accessed  client  information  on  Prudential’s  net¬ 
work  by  dialing  in  over  a  proprietary  private-line 
network  maintained  by  a  third  party.  Many  of  the 
people  dialing  in  were  Prudential  sales  personnel 
in  the  field.  Others  were  independent  sales 
agents. Those  thousands  of  users  were  being 
billed  by  the  minute,  and  access  charges  piled  up 
quickly  Yet  the  fastest  connection  available  to 
these  users  was  128K  bit/sec  ISDN,  much  slower 
than  emerging  broadband  technologies  such  as 
DSL,  cable  and  wireless. 

So  Prudential  went  hunting  for  a  VPN  vendor.  Ed 
Mann,  vice  president  of  network  planning,  had  the 
usual  three  considerations  —  cost,  redundancy 
and  scalability  —  but  he  also  had  another  major 
need:  security  The  equipment  had  to  work  with 
RSA  Security’s  SecurlD  tokens,  and  it  had  to  be  able 
to  handle  digital  certificates,  which  Prudential 
wanted  available  as  a  later  option.  Furthermore, 
equipment  had  to  handle  remote  and  site-to-site 
connections.  A  final  criteria  was  that  the  vendor 
had  to  be  a  well-established  equipment  provider. 

“Two  years  ago  there  were  a  lot  of  guys 
around  whose  only  product  was  a  VPN  box,” 
Mann  says.“With  those  guys  you’re  always  con¬ 
cerned  about  whether  they’re  going  to  be 
bought  up  and  disappear.” 

After  looking  at  eight  equipment  vendors,  six  of 
them  in-depth,  the  company  chose  Nortel.  Its 
largest  VPN  switch,  the  Contivity  4500  Extranet 
Switch,  can  support  up  to  5,000  concurrent  ses¬ 
sions,  easily  meeting  Prudential’s  scalability  re¬ 
quirements.  It  also  works  with  SecurlD  tokens  and 
supports  digital  certificates.  For  high  availability, 


Prudential  had  the  gear  installed,  and  the  first 
employees  switched  over  to  the  VPN  in  March 
2000,The  bulk  of  remote  users  were  shifted  over 
by  July  2001. Today,  90%  of  its  remote  access 
workforce  operates  over  the  VPN,  netting  the 
company  about  $7  million  per  year  in  savings 
from  access  charges.  Prudential  expects  to  boost 
that  figure  to  $8  million  once  the  project  is  com¬ 
pleted  later  this  year  with  the  addition  of  one 
more  business  unit  to  the  VPN. 

The  project  was  not  cheap,  coming  in  at  around 
$1.5  million,  but  given  the  significant  annual 
access  savings,  the  return  on  investment  was 
almost  immediate. 


PREPPING  USERS  FOR  SECURID 

Clever  planning  eased  users  into  stricter  security  methods. 


ne  area  where  Pruden¬ 
tial  Financial  anticipat¬ 
ed  trouble  with  the 
VPN  was  user  acceptance.  No  one 
likes  to  learn  a  new  way  of  doing 
something.  And  RSA  Security's 
SecurlD  token  was  definitely 
something  different  to  users. 

Instead  of  logging  on  to  the  net¬ 
work  with  a  user  name  and  a 
password  that  changed  every  few 
weeks,  users  now  had  to  pull 
new  passwords  off  their  SecurlD 
tokens  every  time  they  logged 
onto  the  network. 

“There  was  some  pushback  on 
the  SecurlD,  because  it  was  a  new 


way  of  getting  onto  the  network,” 
says  Robert  Piccirillo,  vice  presi¬ 
dent  of  field  infrastructure  with 
Prudential. 

To  ease  users  into  the  new  sys¬ 
tem,  Prudential  created  a  training 
video  CD  and  shipped  it  to  em¬ 
ployees.  And  the  company’s  help 
desk  team  hit  the  road,  traveling  to 
various  Prudential  buildings 
across  the  country  to  take  users 
through  the  system  step-by-step. 

The  roadshows  also  helped 
Prudential  overcome  another 
hurdle  —  distribution  and  instal¬ 
lation  of  the  VPN  software. 

“When  you  deal  with  an  organi- 


be  able  to  connect  to  us  at  between  seven 
and  20  times  the  speed  they  could  before." 

Focus  on  security  and  redundancy 

While  Internet-based  VPNs  have  come  under 
fire  for  not  being  as  secure  as  private  dial-up  net¬ 
works,  Mann  believes  Prudential’s  new  VPN  may 
be  more  secure  than  its  former  private-line  net. 

One  major  reason  is  that  Prudential  has  moved 
from  the  30-day  static  passwords  used  on  the  old 
network  to  RSA's  SecurlD  tokens,  where  pass¬ 
words  are  changed  every  60  seconds. To  log  on 
to  Prudential’s  network,  all  users,  local  or  remote, 
must  have  their  SecurlD  token,  issued  by 


zation  as  large  as  ours  and  as 
geographically  dispersed,  the 
issues  really  surround  implemen¬ 
tation  more  than  technology,” 
says  Ed  Mann,  Prudential’s  vice 
president  of  network  planning. 

At  the  roadshows,  employees 
brought  their  laptops  and  went 
through  the  software  installation 
process  step-by-step  with  the 
help  desk.  Other  employees 
installed  the  software  on  their 
own  with  the  help  of  the  training 
CD  or  called  the  help  desk  for 
assistance. 

The  few  who  weren’t  comfort¬ 
able  at  all  with  the  installation 
shipped  their  laptops  to  Prud¬ 
ential,  where  the  help  desk 
loaded  the  software. 

—  Michael  Martin 


“We  can  put  more  sensitive  customer  data  across 
the  wire  and  not  be  afraid  that  someone  is  going  to 
sniff  it  or  intercept  it  in  some  way.” 

-  Ed  Mann,  vice  president  of  network  planning,  Prudential 


the  switch  comes  with  redundant  power  and  stor¬ 
age  systems. 

Nortel  also  provided  the  client-side  software  for 
free  with  the  purchase  of  the  company’s  hard¬ 
ware.  Other  vendors  were  charging  for  each  soft¬ 
ware  client  in  addition  to  the  hardware,  which 
would  have  been  a  particularly  painful  budget  hit 
for  a  VPN  project  this  size.“With  between  25,000 
and  40,000  clients,  even  if  you’re  charging  just  $10 
per  client,  it  adds  up,"  Mann  says. 


Perhaps  the  biggest  cost-saver  Prudential  hit  on 
was  to  use  the  ISP  service  that  employees  already 
had  and  paid  for  at  their  remote  locations,  usu¬ 
ally  their  homes.“Through  VPN  technology,  we 
can  leverage  their  personal  ISP  to  allow  them  to 
access  Prudential’s  client  information  and  other 
data,”  says  Robert  Piccirillo,  vice  president  of  field 
infrastructure  for  Prudential. 

For  Prudential’s  telecommuters,  the  majority  of 
which  didn’t  already  have  ISP  service,  the  com¬ 
pany  negotiated  a  contract  with  AT&T  Global 
Network  services. 

Employees  can  also  use  broad¬ 
band  connections  to  connect  to 
the  VPN.  More  than  1 ,000  users 
already  connect  to  Prudential 
through  a  high-speed  link,  and 
Prudential  is  trying  to  boost  that 
number  through  an  internal  DSL 

-  product  it  is  in  the  process  of 

launching. The  service,  available 
through  Exario  Network  Services,  is  a  business- 
class  offering,  incorporating  service-level  agree¬ 
ments  and  help  desk  support.The  program  is 
open  to  all  true  telecommuters  —  that  is,  those 
working  from  home  on  a  regular  basis. 

Ultimately,  Prudential  would  like  to  use  the  VPN 
to  support  a  larger  number  of  telecommuters. 
“Whether  it’s  DSL,  cable, satellite  or  wireless,  it 
doesn't  really  matter,”  Mann  says.  “Whatever  people 
can  get  they  can  use.  And  once  they  get  it  they'll 


Prudential,  which  generates  a  dynamic  password 
and  a  personal  identification  number  (PIN). 
When  users  initiate  connections  to  the  network, 
they  are  prompted  for  their  PINs  and  the  pass¬ 
words  are  displayed  on  the  token. 

Also,  all  traffic  traveling  over  the  VPN  is  encrypted 
through  Nortel’s  client  software  on  users’  desktops, 
while  traffic  on  the  private  network  was  not. 

“We  can  put  more  sensitive  customer  data  across 
the  wire  and  not  be  afraid  that  someone  is  going 
to  sniff  it  or  intercept  it  in  some  way”  Mann  says. 

For  remote  users  to  access  the  VPN,  they  simply 
log  on  to  their  ISPs,  launch  the  software  VPN 
client  and  enter  the  SecurlD  password.  Once  on 
the  VPN,  employees  have  the  same  rights  and 
privileges  they  would  normally  have  if  they  were 
at  the  office  and  connected  directly  to  their  cor¬ 
porate  network. 

Prudential  maintains  redundant  VPN  gateways  at 
its  headquarters  in  Roseland,N.J.,and  at  its  offices 
in  New  York,  so  if  one  site  goes  down,  users  can 
still  connect  to  Prudential. The  Roseland  and  New 
York  sites  also  have  redundant  firewalls  and  re¬ 
dundant  SecurlD  authentication  servers. 

The  VPN  sessions  are  maintained  by  four  Nortel 
Contivity  4500  switches,  two  of  which  are  located 
at  Roseland  with  the  other  pair  residing  in  New 
York.  Each  4500  can  maintain  5,000  concurrent 
VPN  sessions. 

See  User  Excellence,  page  68 
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THE  CATALOG  OF  (©  BUSINESS 


EXCHANGE  YOUR  EXCHANGE. 

AND  SAVE  UP  TO  38%.  YES,  38%. 


Reliability 


Expense 


Presenting  the  IBM  (©server  iSeries1."  Want  a  less 
expensive,  smarter  alternat  ive  to  upgrading  to  Microsoft 
Exchange  2000?  Want  to  keep  running  the  Outlook 

program  your  users  love, 
but  on  a  server  you’ll  love 
even  more?  Exchange  your 
Exchange  for  the  iSeries 
server.  It  lets  you  support 
thousands  of 

l  ip.  I.  iSeries  Value  Proposition. 

Outlook  users 

on  one  reliable,  low-maintenance  server. 

With  iNotes™  Access  for  Microsoft  Outlook 
it’s  easy  to  consolidate  multiple  Exchange 
servers  onto  a  single  iSeries  running  Lotus1’ 

Domino  "  with  robust,  scalable  power.  And 
in  the  process,  help  bring  reliability,  secu¬ 
rity  and  functionality  up  —  while  keeping 
upgrade,  service  and  help-desk  costs  down. 


cost  up  to  38%  less  than  upgrading 
both  your  hardware  and  software  to 
Microsoft  Exchange  2000.' 


%  2. 


Happy  CFO. 


Same  front  end,  better  back  end. 

To  your  Outlook  users,  migration  to 
Domino  is  virtually  seamless.  They  use  the  same  client 
software  they’re  used  to,  but  can  now  get  the  benefits  of 
Domino,  like  working  offline  and  full-text  search.  It  also 
provides  optional  failover  and  load-bal¬ 
ancing  for  e-mail,  easier  administration, 
and  use  ol  Domino  e-collaboration  apps. 


E-mail  graduates  to  reliability.  The 
architecture  of  the  iSeries  provides  a 
mainframe-inspired  environment,  where  Domino  parti¬ 
tions  are  isolated  from  one  another.  And  problems  in  one 
partition  will  rarely  affect  the  users  in  other  partitions. 
Partitions  can  even  automatically  restart  when  necessary. 

Save  Ilf)  to  38%  vs.  Exchange  2000.  If  reliability  and 
consolidation  aren’t  reasons  enough,  consider  this: 
Migrating  your  Outlook  system  to  Domino  for  iSeries  can 


(gserver 

Reliable ,  scalable  servers  for  (‘-business. 


It  only  gets  better.  IBM  is  one  of  the 
world’s  largest  software  companies, 
the  leader  in  middleware,  and  the 
name  in  reliable  servers.  To  find  out 
more  about  how  IBM  can  help  you, 
register  now  for  a  free,  live  e-briefing 
and  Q&A  session  with  an  IBM  expert. 
In  just  one  hour  (and  right  from  your 
desk)  you’ll  find  out  more  about  the 
iSeries  and  i  INotes  Access  for 
Microsoft  Outlook,  including 
how  to  save  up  to  38%,  and 
other  reasons  why  it  makes 
so  much  sense  to  exchange 
your  Exchange.  Shouldn’t 
you  call  or  click  today? 


SAVE 

t  r  to  38% 

REGISTER 
TOR  OUR  I  REE 
E-BRIEEING 


(6°  ibm.com/eserver/inotes5  Q  800  426  7777  code  6N1DS019 


LEG  il  \OThe 1  For  full  details,  see  vvww  ibm.com/eserver/iseries/domino/inotes/compare.html  IBM.  the  e-busmess  logo,  and  iSeries  are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation.  Lotus,  Domino,  and  iNotes 
are  trademarks  or  registered  trademarks  ot  Lotus  Development  Corporation.  Microsoft  is  a  registered  trademark  ot  Microsoft  Corporation.  Other  company,  product  and  service  names  may  be  traoemarks  or  service  marks  of  others.  ©2001  IBM  Corporation.  All 

rights  reserved. 
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ESTOFTHE  RES 

St.  Elizabeth's  Hospital  and  the  Chicago  Clearing  House  Association  are 
runners-up  in  our  2001  User  Excellence  Award  competition. 


A  hospital’s  one-man  network  band 


I  leeding  edge”  assumes  an  unconven¬ 
tional  meaning  when  applied  to  Don 
Woeltje  and  his  role  as  a  largely  one- 
man  network  shop  for  St.  Elizabeth’s  Hospital. 

That’s  because  constant  triage  —  as  opposed  to  tech¬ 
nological  daring-do  —  has  driven  St. Elizabeths  IT 
agenda  since  Woeltje  came  on  board  at  the  Belleville, 
Ill.,  institution  two-and-a-half  years  ago. The  sheer 
breadth  of  what  Woeltje  and  St.  Elizabeth’s  have  ac¬ 
complished  in  such  a  short  period  of  time  —  often 
against  corporate  resistance  and  mounting  pressure 
from  federal  privacy  regulations  —  warrants  recogni¬ 
tion  for  the  hospital  as  a  runner-up  in  this  year’s 
Network  World  User  Excellence  Award  contest. 

St. Elizabeths  is  part  of  the  13-member  Hospital  Sis¬ 
ters  Health  System.  Among  the  IT  projects  finished  or 
launched  during  Woeltje’s  limited  tenure: 

•  A  parcel  of  security  initiatives,  including  the  estab¬ 
lishment  of  a  formal  security  policy  deployment  of  four 
firewalls,  intrusion-detection,  authentication  and  autho¬ 
rization  systems,  as  well  as  desktop  virus  protection; 

•  The  replacement  of  Novell’s  GroupWise  e-mail 


SCORTINO 


More  online! 

•  Head  online  to  The  Best  Issue 
portal  for  detailed  profiles  of 
these  winners.  You'll  also  find  a  list 
of  honorable  mention  projects. 

DocFinder:  6823 


package  with  Microsoft  Exchange  5.5  and  Outlook,  a 
move  initially  opposed  by  St.  Elizabeth’s  corporate  IT 
overseers  then  emulated  by  them  throughout  the 
chain; 

•  A  pair  of  homegrown  wireless  mobile  patient  ad¬ 
missions  carts  that  cost  less  than  half  of  what  a  vendor 
asked  for  an  off-the-shelf  version; 

•  Initiation  of  10M  bit/sec  wireless  —  with  an  up¬ 
grade  to  100M  bit/sec  —  at  a  pair  of  remote  clinics 
that  saves  the  hospital  $24,000  annually; 

•  An  overhaul  of  the  hospital’s  network  infrastructure 
that  included  swapping  antiquated  Chipcom  hubs 
with  20  Cisco  switches:  Cisco  5509s  in  the  core  and 
2948Gs  at  the  edge; 

•  An  ongoing  three-phase  deployment  of  network 
management  software  from  Tivoli  Systems; 

•  And  a  network  fax  rollout. 

Four  or  five  “rounds  technicians”  relieve  Woeltje  of 
having  to  handle  support  calls  on  top  of  a  mountain  of 
network  management  duties,  but  the  consensus  is: 

“Don  has  accomplished  most  of  this  single-handedly 
says  Ruth  Joachimstaler,  IT  director  at  the  hospital. 


Saintly  intervention 

Don  Woeltje.  network  manager, 
has  achieved  astonishing 
things  during  his  tenure  at 
St  Elizabeth  s  Hospital 


For  details  on  how  St.  Elizabeth  did  so  much  with  so 
little,  head  online  to  The  Best 


Issue  portal,  DocFinder:  682 1 . 


Putting  banks  in  balance  via  the  Web 


ot  since  the  advent  of  the  fax  mac¬ 
hine  has  anything  revolutionized 
check-adjustment  operations  as  has 
the  Chicago  Clearing  House  Association’s  Web- 
enabled  Electronic  Delivery  of  Information  and  Bank 
Adjustments  National  Exchange  system. 

ED1BANX,  introduced  in  pilot  form  in  2000  and 
rolled  out  earlier  this  year,  is  a  welcome  overhaul 
from  the  paper-intensive,  bank-to-bank  balance-adjust¬ 
ment  process.  Although  only  CCHA  member  banks 
and  affiliates  use  EDIBANX,  it  is  poised  to  become  a 
national  standard  for  the  industry. 

EDIBANX  users  have  become  ambassadors  for  sec¬ 
ure,  high-volume  business-to-business  e-business.  One 
hundred  and  sixty-five  banks  in  Illinois, Wisconsin, 
Indiana,  Kentucky  and  North  Carolina  use  the  system. 
They  send  about  90%  of  the  clearinghouse’s  more  than 
$2.5  billion  in  daily  transactions  through  EDIBANX,  and 
by  year-end  the  CCHA  plans  to  have  all  adjustments 
handled  electronically, says  DeWayne  Baker,  vice  presi¬ 
dent  of  the  nonprofit  CCHA. 

Formed  in  1865,  the  CCHA  is  the  clearinghouse  be¬ 
tween  its  eight  member  banks  —  including  Bank  One, 
Bank  of  America  and  LaSalle  Bank  —  and  400 
Midwestern  affiliates.  With  a  huge  volume  of  checks 
passing  through  the  exchange  daily,  tabulation  errors  or 
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lost  checks  tallying  millions  daily 
are  commonplace. 

For  each  error,  the  CCHA  and  the  batiks  involved  must 
track  down  the  source  of  the  problem  and  issue  adjust¬ 
ments.  For  135  years,  the  CCHA  relied  on  paper  for  cash 
letter  adjustments,  delivering  them  and  supporting  doc¬ 
uments  via  courier,  overnight  mail  or  fax  machine,  a 
time-consuming  and  expensive  process. 

Today,  EDIBANX  automates  this  investigation  process 
via  an  infrastructure  composed  of  two  Web  servers,  a 
back-end  SQL  application  server,  redundant  T-l  lines 
and  power  supplies,  and  load  balancing.  Users  access 
the  EDIBANX  site  via  a  browser  and  their  ISPs,  log  on 
and  complete  the  required  online  forms.They  also 
may  scan  in  any  supporting  documents. 

Password  security  is  handled  by  Vasco  Data  Security’s 
Digipass  Controller  software  and  accompanying 
Digipass  300  tokens,  which  continually  validate  a  user’s 
connection  and  thwart  password  cracking  attempts. 

For  its  role-model  token  security  system,  simple  but 
elegant  network  design  and  enormous  industrywide 
impact,  the  CCHA  has  been  named  a  runner-up  of 
Network  Worlds  2001  User  Excellence  Award  contest. 

For  details  on  the  EDIBANX  system  including  its 
network  design,  head  online  to  The  Best  Issue  portal, 
DocFinder:  6822. 


"Nokia  led  the  parade. ..in  the  firewall/VPN  security  appliance  market." 

-IDC,  June  2001 


"Closer  to  high-availability  nirvana  than  any." 

—Network  World,  December  11,  2000 


"The  Nokia  IP530  is  truly  the  best-of-breed  platform  in  the  firewall  market." 

-Information  Security  Magazine,  September  2001 


"A  formula  for  earning  our  Editors'  Choice." 

—PC  Magazine,  September  25,  2001 


"Easy  to  install  and,  more  important,  easy  to  restore." 

-Network  Computing,  May  14,  2001 


You  don't  have  to  take  our  word  for  it.  Nokia  firewalls  and  VPNs  are  the  preferred  choice  of  IT  departments  and 
third-party  reviewers  everywhere.  To  find  out  more,  visit  us  at  www.nokia.com/internet/na.  Welcome  to  the  real  world. 
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User  Excellence 

Continued  from  page  64 

So  far.  Mann  says,  the  number  of  peak 
concurrent  users  on  a  single  switch  has 
hit  1,000. so  scalability  is  assured. 

Next  year.  Prudential  may  purchase 


some  load-balancing  technology  that 
Nortel  acquired  when  it  bought  Alteon 
WebSystems  late  last  year. The  load  bal¬ 
ancers  would  sit  in  front  of  the  4500s,  let¬ 
ting  users  maintain  a  VPN  session  even  if 
the  4500  they  were  connected  to  failed. 
The  load  balancers  would  reroute  the  ses¬ 


sion  to  the  surviving  4500.  Currently  users 
lose  theirVPN  sessions  if  the  Nortel  switch 
they  are  using  goes  down. 

Site-to-site  connections  work  in  almost 
the  same  fashion.  Employees  connect¬ 
ing  through  Exario  will  travel  exclusive¬ 
ly  over  Exario’s  private  network,  which 


LinkProof  -  link  traffic  management  ensuring  cost  effective  24x7  Internet  access 


LinkProof  intelligently  load  balances  and  manages  multiple 
ISP  connections.  It  guarantees  high  availability  between 
ISP  links  by  instantly  detecting  failures  and  redirecting 
traffic  to  the  best  performing  and  healthy  link.  End  users 
receive  their  content  faster  and  costs  are  reduced  through 
link  optimization  and  Bandwidth  Management.  Optimize 
your  links  with  Radware's  Linkproof. 


has  connections  to 
New  York, 

and  will  be  covered  by  ser¬ 
vice-level  agreements. 

Another  difference  is  that  some 
remote  offices,  including  Prudential’s 
international  locations,  will  use  a  Cisco 
router,  instead  of  multiple  workstations,  to 
handle  the  VPN  duties.  Mann  says 
Prudential  will  begin  adding  the  Cisco 
routers  to  the  network  shortly 

A  virtual  future 

While  Mann  is  happy  with  the  money 
Prudential  is  saving  by  implementing  the 
VPN,  he  becomes  most  animated  when 
talking  about  how  the  VPN  is  serving 
business  needs  and  its  potential  for 
doing  more. 

“Little  by  little,  as  we  can  extend  ser¬ 
vices  out  to  any  location,  1  think  it  will 
cause  people  to  think,  and  we’ll  get  to 
the  point  where  we  have  a  virtual  enter¬ 
prise,”  he  says. 

For  example,  Mann  says,  Prudential  will 
begin  to  roll  out  voice  services  to  remote 
employees  with  the  SLA-backed  Exario 
broadband  connections. 

“Eventually  it  will  look  like  the 
telecommuters  are  actually  sitting  in  the 
office,”  he  says.“They’d  have  an  internal 
four-digit  extension,  they’d  have  a  high¬ 
speed  connection  to  Prudential’s  net¬ 
work,  and  they’d  have  exactly  the  same 
services  they’d  have  if  they  were  sitting 
in  the  office.” 

This  can  lead  to  temporary  telework, 
letting  Prudential  employees  set  up 
closer  to  customers  at  times. 

“With  a  VPN  you  can  really  take  the 
mobile  concept  anywhere,”  Mann  says. 
“You  could  set  up  an  office  without  it  hav¬ 
ing  to  be  permanent.You  could  set  it  up 
for  something  like  the  U.S.  Open,  have  six 
agents  with  a  DSL  connection  and  a  wire¬ 
less  LAN  sitting  in  a  kiosk  in  Queens,  N.Y, 
and  then  pull  it  all  down  when  the  event 
was  over." 

More  widespread  broadband  connec¬ 
tions  will  also  let  Prudential  save  money 
by  using  videoconferencing  and  dis¬ 
tance-learning  programs  over  the  VPN. 

“Today,  either  we  have  to  send  training 
people  out  to  the  employees,  or  they 
have  to  come  to  a  central  location  for 
training,”  Mann  says. 

With  the  VPN  in  place,  a  box  and  a 
broadband  connection  become  more 
important  than  a  brick-and-mortar  office 
—  a  sure  sign  that  Prudential’s  project 
has  revolutionized  the  way  the  company 
does  business.  ■ 
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More  online! 

Head  to  our  Net.Worker 
site  for  more  information 
on  telework  projects 
and  issues. 
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The  ATLAS  550  from  ADTRAN*  makes  it  possible,  for  the  first 
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real-as-it-gets  experience  in  configuring  routed  WAN  networks. 


The  ATLAS  550 
eliminates  the  high 
costs  previously 
associated  with  WAN 
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ST PRODUCTS 


IBM  and  Cisco  remain  perennial  favorites  while  Microsoft  lags  in  popularity  among 
readers  who  participated  in  our  third  annual  Best  Products  survey. 


BY  JULIE  BORT 


hen  it  comes  to 
brand  names  in  the 
network  industry, 
Cisco  and  IBM  glow 
as  golden  as  a  mon¬ 
arch’s  crown.  In  com¬ 
parison,  Microsoft  would  best  be  de¬ 
scribed  as  gray:  frequently  the  market- 
share  king  but  never  the  users'  favorite. 

That’s  one  of  the  findings  of  our  third 
annual  Best  survey  in  which  we  ask 
Network  World  readers  to  tell  us  which 
products  they  liked  best  in  selected  cate¬ 
gories.  This  year,  we  queried  readers  on 
10  categories  ranging  from  commonly 
used  management  software  to  cutting- 
edge  security  products  (see  chart,  right). 

Participants  voted  IBM  the  winner  in 
each  of  the  four  categories  in  which  it 
was  listed.  Cisco,  too,  won  all  three  of  its 
categories.  Microsoft  won  none  of  its 
three,  even  when  it  owned  the  biggest 
market  share  among  participants  —  a 
circumstance  unique  to  Microsoft. 

More  than  500  people  participated  in 
the  Web  survey,  conducted  for  Network 
World  by  King,  Brown  &  Partners  in  Sausa- 
lito,  Calif.  However,  each  participant  did 


not  vote  in  every  category 

We  crowned  winners  based  on  two 
types  of  calculations.  A  straightforward 
calculation  of  best  votes  carried  most  of 
the  weight.  If  a  product  achieved  a  statis¬ 
tically  significant  percentage  of  votes,  we 
dubbed  it  “best.”  For  instance,  in  the  load¬ 
balancing  switch  category  Cisco’s  Catalyst 
6500  series  with  load-balancing  module 
won  by  earning  60%  of  the  best  votes  — 
more  than  triple  any  other  product. 

If  best  votes  were  split  tightly  we  turned 
to  a  statistic  called  the  Preference  Rating 
to  determine  the  winner.  This  rating  ad¬ 
justs  for  the  statistical  advantage  of  high 
market  share  (see  story  below). 

The  Preference  Rating  only  came  into 
play  in  the  network-attached  storage 
(NAS)  category  in  which  Dell,  Quantum, 
IBM  and  Compaq  products  grabbed  near¬ 
ly  the  same  number  of  best  votes  —  with 
Dell  at  17%, Quantum  at  16%, and  Compaq 
and  IBM  at  15%  each.  Because  IBM 
earned  a  1.36  Preference  Rating,  com¬ 
pared  with  Dell’s  0.77, Quantum’s  0.80  and 
Compaq’s  1.0,  we  dubbed  it  winner. 

In  all  categories  but  NAS,  participants 
dictated  winners  in  near  landslides.  ■ 


WHAT’S  A  PREFERENCE  RATING? 

This  specialized  rating  gives  us  a  way  of  figuring  out  how  a  product's 
market  share  affects  its  rank  in  our  Best  Products  survey. 

he  Preference  Rating,  which  adjusts  for  the  statistical  advantage  of  high 
market  share,  supplements  the  straight  percentage  results  we  garner  in 
our  annual  Best  Products  survey. 

To  determine  both  results,  we  e-mailed  a  group  of  Network  World  readers  asking 
them  to  participate  in  this  private  Web  survey.  We  received  504  completed  entries, 
with  two-thirds  from  large  companies  (1,000  or  more  employees).  Respondents  came 
from  16  industries,  with  manufacturing,  education,  government,  finance  and  retail/ 
wholesale  industries  topping  the  list. 

We  asked  participants  to  tell  us  which  products  they  used,  choosing  from  a  drop¬ 
down  list,  and  then  which  of  these  products  they  deemed  best.  King,  Brown  & 
Partners,  a  survey  firm  in  Sausalito,  Calif.,  calculated  the  percentage  of  best  votes 

and  the  Preference  Rating. 

A  product  with  a  high  market  share  (percentage  of  "use”  votes)  has  a  better 
chance  of  earning  a  higher  number  of  “best”  votes  than  a  product  with  fewer  users. 
A  product  that  earns  a  high  number  of  best  votes  compared  with  its  number  of 
is>-ns  will  have  a  high  Preference  Rating. The  converse  is  also  true. 

For  example,  in  the  desktop  management  software  category,  49%  of  participants 
-  a  *hey  used  Microsoft’s  Systems  Management  Server  2.0.  Yet  only  31%  voted  it 
: SMS  therefore  had  a  Preference  Rating  of  0.63.  In  contrast,  34%  use  Novell's 
7 1 N .  i  s,  yet  36%  voted  it  best,  landing  it  a  1.06  Preference  Rating. 

A  1.0  score  is  the  baseline.  A  score  above  1.0  indicates  voters  thought  the  product 
■  an  its  competitors.Those  that  scored  below  1.0  illustrate  the  reverse  (see 

•  •’ and  Lowest  charts,  far  right). 

—  Julie  Bort  and  Brenda  Stull,  research  director,  King,  Brown  &  Partners 


Best  product  winners 


Based  on  results  of  our  third  annual 
Best  Products  survey  we  crowned  the 
nine  products  that  earned  the  highest  percentage  of  best  votes  as  winners.  In  the  case 
of  network-attached  storage  appliances,  we  broke  a  four-way  tie  using  the  Preference 
Rating,  a  measurement  we  devised  to  adjust  for  the  statistical  advantage  of  high 
market  share  (see  story,  bottom  left). 


Category 


Winner 


Best  desktop 

Novell's  ZENworks 

management  software 

for  Desktops 

Best  network  performance 

Network  Associates' 

management  software 

Sniffer  Portable  LAN 

Novell 


Best  load-balancing  switch 


Best  enterprise 
e-commerce  platform 


Best  enterprise 
collocation  service 


Best  VPN  appliance 


Best  network-attached 
storage  appliance 


Best  public-key 
infrastructure  software 


Best  enterprise 
voice-over-IP  gateway 


Best  commercial 
Linux  distribution 


Cisco's  Catalyst  6500  series 
with  load  balancing 

! 

IBM's  WebSphere 
Application  Server  { 


I 


IBM  Global  Services' 
Facilities  Hosting  services 


Cisco  s  VPN  3002 
Hardware  Client 


IBM's  TotalStorage  NAS 
200  and  300  series 


VeriSign 

OnSite 
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Cisco  s  AS5x00 
universal  access  server 


Red  Hat's  Linux  7 


USER 

PICKS 
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191 
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A  PREFERENCE  RATINGS 

As  indicated  by  the  Preference  Ratings 
higher  than  1.0,  many  Best  Products  survey 
participants  who  don’t  currently  use  these 
products  voted  them  best. 

PRODUCT 

RATING 

Desktop  management  software 

1.50 

Magic  Solutions'  (Network  Associates) 
Zero  Administration  Client  Suite 

Network  performance 
management  software 

1.25 

Lucent’s  VitalNet 

Load-balancing  switches 

1.25 

Foundry  Networks'  Serverlron 

Enterprise  e-commerce  platforms 

1.33 

Blue  Martini's  Commerce 

Enterprise  collocation  service 

IBM  Global  Services’  Facilities 

1.25 

Hosting  services 

VPN  appliances 

1.00 

Nokia’s  Firewall/VPN  Appliance 
Symantec’s  VelociRaptor 

NetScreen's  NetScreen-100 

RedCreek's  Ravlin 

Network-attached  storage 

1.36 

IBM's  TotalStorage  NAS  200 
and  300  series 

Public-key  infrastructure  software 

1.50 

Baltimore  Technologies'  UniCERT 
Certicom’s  Trustpoint  Certificate 
Authority 

Enterprise  voice-over-IP  gateways 

1.02 

Cisco's  AS5x00  universal 

access  servers 

Commercial  Linux  distributions 

No  Linux  distribution  earned 

▼  PREFERENCE  RATINGS 

Many  Best  Product  survey  participants 
who  use  these  products  voted  others  best, 
as  indicated  by  the  Preference  Ratings 
below  1.0. 


PRODUCT 

RATING 

Desktop  management  software 

0.33 

Marimba's  Castanet 

Network  performance 
management  software 

Network  Associates'  Sniffer 

Portable  LAN 

0.69 

Load-balancing  switches 

0.33 

Lucent's  imminet  WebDirector 

Enterprise  e-commerce  platforms 

BroadVision's  BroadVision 

One-To-One  Enterprise  6.0 

0.25 

Enterprise  collocation  service 

Globix’s  Co-location 

XO  Communications’  Server  Collocation 

0.50 

VPN  appliances 

WatchGuard's  Firebox 

0.71 

Network-attached  storage 

Procom  Technology's  NetForce 

3100  HA 

0.50 

Public-key  infrastructure  software 

iPlanet's  Certificate  Management 
System 

0.43 

Enterprise  voice-over-IP  gateways 

0.33 

Ericsson's  WebSwitch 

Commercial  Linux  distributions 

Caldera  Systems'  OpenLinux  series 

Mandrakesoft's  Linux-Mandrake  8.0 

• 

0.39 

\  u  s  / 


More  online! 

Show  and  place:  We've  charted  how 
many  best  votes  all  competitors 
earned.  How  did  your  peers  vote  on 
your  favorite  products? 
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Brix 


For  guaranteed  IP  performance, 
don’t  just  take  your  service 
provider’s  word  for  it.  Make  them 
prove  it  -  with  Brix  Networks. 


Networks 


You're  an  enterprise  IT  professional.  You've  partnered  with 
a  service  provider.  And  you've  signed  the  SLA.  So,  how  do 


A  MEASURE  ABOVE 


you  really  know  you're  getting  all  that's  been  promised? 


For  the  latest  independent  research  on  the  vital  role  SLA 
verification  plays  when  enterprises  choose  a  service  provider, 

visit  www.brixnet.com/sagewp. 

1-888-BRIXNET  •  1-978-367-5600 
info@brixnet.com  •  www.brixnet.com 
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Take  the  guesswork  out  of  your  SLAs.  Choose  a  provider 
who  has  a  network  Built  with  Brix.  The  Brix  System  is  the 
only  complete  solution  that  proactively  measures  and 
guarantees  advanced  IP  services.  And,  Brix  verifies  the  real¬ 
time,  end-to-end  performance  of  VPNs,  VoIP,  streaming 
media,  and  hosted  applications. 

Make  sure  your  SLA  is  worth  more 
than  just  the  paper  it’s  written  on. 

Make  sure  it’s  Built  with  Brix. 
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THE  TESTS 

Thirteen  products  win  our  2001  Best  of  the  Tests  Award  as 

tops  in  their  tested  categories. 


More  online! 


Our  Test  Alliance 
members  share  their 
secrets  for  testing  and 
give  more  product 
opinions. 
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BY  CHRISTINE  BURNS 


Network  World  awards  the  Best  of  the  Tests 
distinction  to  products  that  have  shined  in 
our  rigorous  hands-on  testing  during  the 
past  12  months.  This  designation  signifies 
which  among  the  more  than  240  products 
and  services  from  150-plus  companies  we 
tested  from  Nov.  1,2000,  to  Oct.  3 1,2001,  are  the  cream  of 
the  crop. 

We  divided  the  tested  products  and  services  into  13  cat¬ 
egories  based  on  market  focus.  Our  Best  of  the  Tests 
Award  categories  are:  client  maintenance,  directories,  en¬ 
terprise  servers,  Internet  appliances,  ISP  services,  mobile 
management,  multimedia  networking,  network  manage¬ 


ment,  security  enterprise  switching/routing,  Web  acceler¬ 
ation,  Web  site  management  and  wireless. 

To  determine  the  winner  in  each  category,  we  took 
into  account  the  score  —  with  the  best  possible  a  5.0  — 
awarded  to  each  product  by  the  Network  World  Global 
Test  Alliance  member  or  independent  reviewer  who 
conducted  the  test.  In  cases  where  multiple  products 
vied  for  the  top  spot  within  a  category  based  purely  on 
score, Network  World  reviews  editors  picked  the  winner 
based  on  how  well  each  product  outperformed  or  out- 
featured  the  products  against  which  it  was  tested. 

Now,  on  to  the  winners  of  this  year’s  Best  of  the 
Tests  Award. 


Client  maintenance 


C^or  the  second  year,  Intel's  LANDesk 
02s7  Management  Suite  topped  a  half-dozen 
competitors  in  the  overall  desktop  management 
suite  realm,  besting  products  that 
help  migrate  desktop  personalities 
to  new  PCs  and  assist  with  applica¬ 
tion  installation.  Intel's  suite  got  the 
thumbs  up  for  strong  standard  fea¬ 
tures  such  as  desktop  configuration 
and  software  distribution  and  for  its 
innovative  approach  to  Web-based 
management. 


Best  of  the  Tests  Award  winner: 

LANDesk  Management  Suite 
Company:  Intel,  www.intel.com 

Date  reviewed:  April  9 
Score:  3.53 

Score  above  category  mean:  0.37 
Reviewer’s  comment:  LANDesk  is  the  best 
overall  choice  . . .  because  it  includes  things  not 
found  in  its  competitors’  offerings,  such  as 
Norton  AntiVirus  protection  and  support  for  Linux 
machines.  —  Paul  Ferrill,  independent  reviewer 


Directories 

A/~ etl 0.  which  won 

02/  V  last  year's  net¬ 
work  operating  system 
administration  tools  Best 
of  the  Tests  category  with 
its  OnePoint  Operations 
Manager,  returns  to  the 
roster  this  year  with  its  Domain  Migration 
Administrator  (DMA).  This  product  bested  three 
others  in  our  Windows  2000/Active  Directory 
migration  tool  shootout.  NetlQ  DMA,  which 
ships  in  the  OnePoint  software  package,  earned 
top  honors  for  its  ease  of  use  and  strong  direc¬ 
tory  modeling  tools. 

Best  of  the  Tests  Award  winner: 

Domain  Migration  Administrator 
Company:  NetlQ,  www.netiq.com 

Date  reviewed:  Jan.  29 
Score:  3.3 

Score  above  category  mean:  0.35 
Reviewer’s  comment:  NetIQ's  directory  migra¬ 
tion  tool  is  the  most  polished  one  available.  — 
Dennis  Williams,  independent  reviewer 


Enterprise  servers 

he  Compaq  ProLiant  DL380  is  a  small, 
02/  rack-optimized  server  that  packs  a  huge 
performance  punch.  This  dual-processor  box  won 
our  World  Class  Award,  given  to  products  that 
receive  a  mark  of  4.5  or  higher  in  our  scorecard, 
largely  for  its  near-perfect  performance  numbers 
across  our  file,  network  and  database  tests.  It 
was  the  only  enterprise  server  of  five  we  tested 
this  year  to  earn  the  World  Class  distinction. 

Best  of  the  Tests  Award  winner: 

ProLiant  DL380 

Company:  Compaq,  www.compaq.com 

Date  reviewed:  Aug.  20 
Score:  4.61 

Score  above  category  mean:  0.44 
Reviewer’s  comment:  The  Compaq  DL380  is 
probably  the  most  well-thought-out  server 
we’ve  seen.  —  John  Bass,  technical  director, 
Centennial  Networking  Lab,  North  Carolina 
State  University 


BEST  USER  NETWORKS 


QfAe  i 


Mae 


Internet  appliances 

?un  Cobalt's  Qube  3  edged  out  sim¬ 
ilar  Internet  server  appliances  and 
a  host  of  residential  Internet  gateway 
products  to  win  top  honors.  The  Qube  3 
garnered  our  Blue  Ribbon  Award,  given  to 
any  product  that  wins  a  comparative 
review  with  a  score  greater  than  3.5,  for 
offering  the  most  administrative  informa¬ 
tion,  strongest  fault  tolerance  and  best 
Web  e-mail  among  appliances  tested. 


Best  of  the  Tests  Award  winner: 

Qube  3  Professional  Edition 
Company:  Sun  Cobalt,  Sun’s  Service 
Appliance  Business  Unit,  www.cobalt.com 

Date  reviewed:  May  21 
Score:  4.15 

Score  above  category  mean:  0.75 
Reviewer’s  comment:  Sun  Cobalt 
didn't  invent  the  Internet  server  appliance 
niche  with  Qube  3,  but  it's  done  the  most 
to  popularize  the  market.  —  James 
Gaskin,  Gaskin  Computing  Services 

ISP  services 

G^"his  award  is  based  on  our 
( monthly  Top  ISPs  Report,  which 
tracks  dial-up  ISP  performance  in  sever¬ 
al  categories  from  data  compiled  by 
eTesting  Labs’  Internet  BenchMark  ser¬ 
vice  (see  www.nwfusion.com;  DocFinder: 
6726).  Each  month,  AT &T  WorldNet 
scores  high  marks  in  performance, 
including  the  shortest  logon  times,  a  low 
call-failure  rate 
(less  busy  sig¬ 
nals  or  dropped 
calls)  and  ini¬ 
tial  modem 


connect  speed. 

Best  of  the  Tests  Award  winner: 

WorldNet 

Company:  AT&T,  www.att.net 

Date  reviewed:  Monthly 
Score:  N/A 

Score  above  category  mean:  N/A 
Reviewer’s  comment:  Over  the 
past  year,  no  other  ISP  has  come 
close  to  toppling  AT &T  WorldNet's 
hold  in  the  national  retail  market.  — 

Keith  Shaw,  Network  World  senior 
reviews  editor 

Mobile  management 

rQ^K“rom  a  field  of  20,  we  selected 
iConverse's  Mobile  Studio  and 
Interaction  Server  combination  because 
it's  the  best  at  extending  enterprise 
applications  into  the  mobile  computing 
realm.  In  particular,  iConverse's  product 
won  for  its  superior  user  interface  and 
support  for  a  range  of  devices. 

Best  of  the  Tests  Award  winner: 

Mobile  Studio  2.0  and  Interaction 
Server  2.0 


Company:  iConverse, 
www.iconverse.com 

Date  reviewed:  June  25 
Score:  4  3 

Score  above  category  mean:  0.61 
Reviewer’s  comment:  We  strongly 

suggest  you  look  first  at  iConverse’s 
Mobile  Studio  and  Interaction  Server 
when  you  embark  on  a  wireless  project 
to  extend  a  business  application 
the  last  mile.  —  Barry  Nance, 
independent  consultant 


Call  1-800-0K-CANQN  ext.  50  orvisitwww.imagerunner.com 
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Overnight 

Delivery 


to 


A  box  that  delivers 
paper  documents 
anywhere  overnight? 


Introducing  the  Canon  imageRUNNER  with  document  distribution  technology.  Now  you  can  send 
paper  documents  anywhere,  in  any  form,  at  anytime,  right  over  your  network  or  the  internet.  Instantaneously.  Simply 
scan  a  document  into  the  imageRUNNER  5000,  and  you  can  send  it  to  any  desktop,  e-mail  address,  fax  machine,  database 
or  file  server.  And  since  the  Canon  imageRUNNER  is  capable  of  integrating  directly  with  your  existing  e-mail,  lanfax, 


'  Requires  additional  software  which  is  sold  separately.  Speak  to  your  authorized  Canon  dealer. 

Canon  is  a  registered  trademark  and  IMAGERUNNER  and  Canon  Know  How  are  trademarks  of  Canon  Inc.  IMAGEANYWARE  is  a  service  mark  of  Canon  U.SJC,  Inc.  02001  Canon  U.S  A.  Inc. 
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Multimedia  networking 

our  first-ever  test  of  network- 

based  services,  Activated 
streaming  media  service  edged  out 
Yahoo’s  Broadcast  because  of  its  excep¬ 
tional  ability  to  deliver  on-demand  applica¬ 
tions  and  its  strong  finish  in  our  live-event 
broadcasting  tests.  Activate,  bought  by 
Loudeye  Technologies  in  September,  also 
topped  multimedia  point  products  from 
PictureTel  and  FlipFactory. 


(> rnuvaie 


Best  of  the  Tests  Award  winner: 

Activate  streaming  media  service 
Company:  Activate,  www.activate.com 

Date  reviewed:  Dec.  4,  2000 
Score:  N/A 

Score  above  category  mean:  N/A 
Reviewer’s  comment:  Activate  offers 
well-managed  streaming  media  net¬ 
works,  has  high  event  and  viewer 
capacity,  and  a  finely  tuned  business 
process.  —  Christine  Perey,  principal 
Perey  Research  and  Consulting 


Network  management 

itara  Network’s  quality-of-service 
O'  appliance,  QoSWorks  10000, 
earned  the  top  spot  in  this  crowded  cate¬ 
gory.  This  box,  which  sits  between  a  LAN 
and  a  WAN  router,  lets  network  profes¬ 
sionals  manage  expensive  network  band¬ 
width.  It  supports  data  rates  up  to  100M 
bit/sec  with  its  Pentium  III  600-MHz 
processor  and  dual  10/100M  bit/sec 
Ethernet  interfaces.  It  also  has  a  sophisti¬ 
cated  Web-based  management  interface. 

Best  of  the  Tests  Award  winner: 

QoS  Works  10000 
Company:  Sitara  Networks, 
www.sitaranetworks.com 

Date  reviewed:  April  16 
Score:  4.15 

Score  above  category  mean:  0.59 
Reviewer’s  comment:  This  could  be 
just  the  thing  for  weary  network  man¬ 
agers  and  their  stressed-out  WANs.  — 


Greg  Goddard,  network  engineer, 
University  of  Florida  Network  Services 

Security 

A/* okia’sVPN  gear  finished  in  a 
V  dead  heat  with  products  from 
Check  Point  Software,  Cisco  and  Lucent 
in  our  October  shootout  based  on  inter¬ 


operability,  management  and  perfor¬ 
mance.  But  when  we  factored  in  its  stel 
lar  performance  in  ourVPN  high-avail¬ 
ability  tests  from  last  December,  the 
CryptoCluster  2500  earned  the  top 
spot  undisputed. 

Best  of  the  Tests  Award  winner: 

CryptoCluster  2500 
Company:  Nokia,  www.nokia.com 
Date  reviewed:  Dec.  11, 2000,  and  Oct.  1 
Score:  4.5  and  3.8 

Score  above  category  mean: 

1.24  and  0.17 


Reviewer’s  comment: 

CryptoCluster  came  closer  to 
high-availability  nirvana  than  any 
product  tested.  —  Joel  Snyder, 
principal,  Opus  One 

Enterprise  switch/routers 

mong  the  variety  of  Ethernet 
and  optical  switch/routers  test¬ 
ed,  Cisco's  Catalyst  6509  came  out  on 
top  based  on  performance.  For  advanced 
network  configurations  such  as  those 
requiring  link  aggregation,  fast  failover 
and  traffic  prioritization,  our  tests  show 
Cisco's  Catalyst  6509  is  better  equipped 
than  its  rivals. 

Best  of  the  Tests 
Award  winner: 

Catalyst  6509 
Company:  Cisco, 
www.cisco.com 

Date  reviewed: 
April  16 
Score:  4.5 
Score  above 
category  mean: 
0.86 


Or  a  box  that 
delivers  them  instantly 
over  the  internet? 


and  document  management  software,  you  can  maximize  your  investment 
in  these  systems*.  The  cost  and  hassle  of  overnight  delivery  are  finally 
over.  At  Canon,  we’re  giving  people  the  know-how  to  make  paper 
documents  work  in  an  internet  world. 
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Reviewer’s  comment:  Our  results 

suggest  Cisco's  device  is  up  to  the 
task  of  delivering  vast  amounts  of 
bandwidth  on  corporate  backbones, 
even  with  advanced  features  such 
as  QoS  enabled. 

—  David  Newman,  president, 
Network  Test 


Web-acceleration  tools 

ur  tests  showed  that  CacheFlow's 
new  Server  Accelerator  725,  which 
off-loads  content-delivery  tasks  from  Web 


servers,  can  boost  Web  server  perfor¬ 
mance  by  eight -fold.  That's  the  main 
reason  it  earned  top  honors  in  this  cate¬ 
gory.  Plus,  the  SA  725  was  easy  to  install 
and  offered  excellent  redundancy. 

Best  of  the  Tests  Award  winner: 

Server  Accelerator  725 


PowerQuest  PowerManage  Suite™  provides  IT  professionals  with  a  data 
availability  solution  for  enterprise-wide  Windows®  2000  and  NT®  Servers.  This 
suite  is  a  comprehensive  set  of  products  that  allows  you  to  prevent  storage 
problems  before  they  occur,  minimize  system  downtime  in  the  event  of  a 
problem,  and  reduce  the  overall  cost  of  network  storage  administration. 


PowerQuest  PowerManage  Suite 


includes: 


PowerQuest  PowerExpert  ST™ 

•  Monitor,  manage  and  enforce  disk  storage  limits  in  real  time  to  maximize 
disk  space 

•  Generate  standard  and  customizable  reports  on  all  major  storage  criteria 

•  Capacity  plan  by  recording  storage  usage  over  time  to  estimate  future 
storage  requirements 


PowerQuest  VolumeManager™ 

•  Easily  resize,  reconfigure,  check,  format,  delete  and  copy  volume  sets 

•  Reconfigure  and  add  drives  to  your  RAID  storage 

•  Securely  shred  partitions  to  protect  your  valuable  data 


PowerQuest  StorageMonitor™  (included  in  VolumeManager) 

•  View  volume/partition  and  server  information  domain-wide  via  a  web  browser 

•  Receive  automatic  threshold  notification  via  e-mail  or  pager 


Combine  these  products  with  PowerQuest’s  consulting,  training  and  education, 
and  premium  support,  and  it’s  no  wonder  that  77%  of  Fortune  500  companies 
and  over  4  million  satisfied  customers  rely  on  PowerQuest  solutions. 


To  find  out  more  about  PowerQuest  Storage  Management  Solutions, 
or  to  receive  a  FREE  demo  of  PowerQuest’s  PowerManage  Suite,  call  us 
today  at  1-800-379-2566,  or  simply  visit  us  at 
www.powerquest.com/powermanage/nww 


C2001  PowvfOuasi  Corporation  AM  ngftt*  *M«rv«d  AM  brand  and  product  namas 
ara  trademarks  or  raywlarad  trademarks  of  thaw  respective  owners  The 
PowerQuest  products  may  be  protected  under  U  S  and  International  patent  law  or 
pandas  patent* 


Pkovcm  Solutions  poa  Stohagi  Managcmcnt 


Many  Companies  predict 
Storage  problems,  but 


how  many  can 


solve 


them  before  they  occur? 


Company:  CacheFlow 
www.cacheflow.com 

Date  reviewed:  April  2 
Score:  4.05 

Score  above  category  mean:  0.72 
Reviewer’s  comment:  The  SA  725  sig¬ 
nificantly  boosts  Web  server  performance 
by  off-loading  Secure  Sockets  Layer  pro¬ 
cessing  and  reducing  the  latency  inherent 
in  Web  page  retrieval.  —  Betsy  Yocom, 
senior  editor,  Miercom 

Web  site  management 

C^“r om  a  field  of  products  that  ad- 
dresses  everything  from  applica¬ 
tion  management  to  access  control,  Se- 
curant  Technologies’  ClearTrust  Secure- 
Control  tops  our  list  because  of  its  unique 
features.  It  ships  with  "smart  rules"  that 
allow  or  deny  access  to  a  Web 
site  depending  on  defin¬ 
able  user  attributes;  has 
a  "rule-testing"  feature 
that  lets  you  select  a 
user  account  and 
resources  and  verify 
access  permissions;  and 
“event  actions"  features 
that  can  trigger  another 
task  when  a  system 
event  occurs. 


Best  of  the  Tests 
Award  winner: 

ClearTrust  SecureControl  4.5 
Company:  Securant  Technologies, 
www.rsasecurity.com 

Date  reviewed:  May  26 
Score:  4.05 

Score  above  category  mean:  0.6 
Reviewer’s  comment:  SecureControl 
is  a  step  ahead  of  the  competition  on  a 
number  of  levels.  —  Steve  Lewis,  inde¬ 
pendent  reviewer 

Wireless 

Cisco's  Aironet  340  wireless  LAN 
access  point  was  the  hands-down 
winner  in  this  category,  garnering  the 
highest  score  we  awarded  all  year.  It 
earned  such  a  high  grade  when  lined  up 
against  eight  competing  products  be¬ 
cause  it  delivered  the  best  mix  of  perfor¬ 
mance  and  manageability. 

Best  of  the  Tests  Award  winner: 

Aironet  340 

Company:  Cisco,  www.cisco.com 

Date  reviewed:  Feb.  5 
Score:  4.9 

Score  above  category  mean:  1.75 
Reviewer’s  comment: 

The  Cisco  Aironet  340  is 
a  strong  fit  in  the 
enterprise.  It 
delivers  con-  * 
sistently  higher  * 
performance 
than  the  other  prod¬ 
ucts,  has  good  man¬ 
ageability  and  the  price  is  not 
totally  out  of  line.  —  Mike  Avery, 

Network  World  reviews  editor 


FiBERLINK 


Technologies 


Fiberlink  Communications 
Corp. 

Fiberlink  Global  Remote 

(215)  793-6500 

www.fiberlink.com 
Fiberlink  is  a  leading  provider  of 
secure,  managed  mobile  access  solu¬ 
tions.  Leveraging  Internet  and  VPN 
technology,  Fiberlink  Global  Remote 
provides  mobile  workers  secure 
access  to  native  applications  anytime 
anywhere  via  any  device.  Fiberlink, 
extending  mobile  access  capabilities, 
now  offers  integrated  personal  fire¬ 
wall  and  intrusion  detection  as  well 
as  authenticated  wireless  access  via 
handheld  devices. 


SBS  Technologies,  Inc. 

(760)  438-6900 

www.sbs.eom 

SBS  Technologies  designs  and  builds 
open  architecture  embedded  comput 
ing  products  serving  the  commercial, 
communication  and  government  mar¬ 
kets.  SBS  products  are  integrated 
into  applications  including  communi¬ 
cation  networking,  medical  imaging, 
industrial  automation,  and  military 
systems.  The  SBS  portfolio  includes 
CPU  boards,  computer  interconnec¬ 
tions,  avionics,  telemetry,  and  fully 
integrated  systems  and  enclosures. 


POWEi 


Proven  Solutions  for  Storage  Management 


PowerQuest  Corporation 
(801)  437-8900/(800)  379-2566 

www.powerquest.com 
PowerQuest  Corporation,  a  leading 
software  developer  and  technology 
pioneer,  provides  solutions  to  simplify 
complex  storage  management 
issues.  A  privately  held  company, 
PowerQuest  technologies  enable 
midrange  enterprises  to  effectively 
and  efficiently  manage,  deploy  and 
protect  server  and  desktop  storage 
resources.  PowerQuest's  products 
are  available  through  a  network  of 
partners  and  distributors  in  more  than 
34  countries  worldwide. 


FatPipe  Networks 

FatPipe®  Multi-Path  VPN 

(800)  724-8521 

www.fatpipeinc.com 
FatPipe  Multi-Path  VPN,  a  new  router 
clustering  device  from  FatPipe 
Networks,  takes  any  VPN  and  makes 
it  up  to  three  times  more  reliable  and 
redundant  and  nine  times  more 
secure  using  FatPipe's  MPsec  tech¬ 
nology.  Multi-Path  VPN  balances  load 
of  bi-directional  IP  traffic  over  multiple 
connections  up  to  135Mbps,  without 
BGP  programming. 


Systems  Manufacturing  Corp. 
(800)  SMC-PLUS/(607)  775-1100 

www.smcplus.com 
The  SMC®,  NOC  Vision™  is  a  high 
end  Command  Bridge  that  has  been 
developed  for  the  NOC  environment. 
The  NOC  Vision  offers  a  modern  aes¬ 
thetic  appearance  and  an  open  archi¬ 
tecture.  It  is  modular  and  versatile  with 
all  of  the  necessary  features  and 
options  needed  in  a  NOC  environment. 


Raritan  Computer,  Inc. 

ConsoleSwitch  SCS232 

(800)  724-8090 

www.  rar  itan .  com 

ConsoleSwitch  SCS232  is  Raritan's 
first  full-featured  multi-user  switching 
device  enabling  two  users  to  access 
up  to  32  devices  via  serial  console 
ports.  When  deployed  with  Raritan's 
flagship  KVM  switching  product, 
Paragon,  this  breakthrough 
ConsoleSwitch  adds  seamless,  inte¬ 
grated  serial  console  connectivity  to 
award-winning,  Cat  5-based  KVM 
access  to  servers.  The  IT  or  network 
operations  administrator  is  thus  able 
to  achieve  control  of  all  devices  in 
the  data  center  through  a  single  inte¬ 
grated  system,  independent  of  the 
network. 


RSA 


S  EC  U  R  I  T  Y™ 

RSA  Security,  Inc. 

(800)  495-1095 

www.rsa.com 

RSA  Security  Inc.,  the  most  trusted 
name  in  e-security™,  helps  organiza¬ 
tions  build  secure,  trusted  founda¬ 
tions  for  e-business  through  its  RSA 
SecurlD®  two-factor  authentication, 
RSA  ClearTrust®  authorization,  RSA 
BSAFE®  encryption  and  RSA  Keon® 
digital  certificate  management  prod¬ 
uct  families.  RSA  Security  has  the 
proven  leadership  and  innovative 
technology  to  address  the  changing 
security  needs  of  e-business. 


XO  Communications 

XO™  VPN 

(866)  513-4322 


OSITIS. 

Powering  Internet  Management 

Ositis  Software,  Inc. 

AVStripper,  WinProxy,  AccessNow 
VBN,  AccessNow  Express, 
AccessNow  Firewall 
(925)  225-8900 

www.ositis.com 

Ositis  Software  develops,  markets 
and  supports  security,  management 
and  Internet  access  technologies. 

The  Ositis  line  of  secure  firewall 
proxy  servers,  Internet  access  prod¬ 
ucts  and  virus  control  devices  provide 
users  with  the  ability  to  connect, 
manage  and  secure  their  networks. 
Ositis  just  launched  AVStripper,  the 
first  hardware  bridge  that  removes 
viruses  from  all  major  protocols  on 
the  network. 


SAVVIS  Communications 

SAVVIS  Intelligent  IPsm  Networking 
(800)  SAVVIS-1 

www.sawis.net 

SAVVIS  Communications  Corp. 
(NASDAQ:  SWS)  is  a  global  business 
network  service  provider  (NSP)  that 
delivers  virtual  private  networks  and 
managed  hosting  services  to  medium¬ 
sized  enterprises  and  the  financial 
services  market.  SAVVIS1  VPNs  deliver 
the  reliability,  performance  and  secu¬ 
rity  of  traditional  private  networks,  as 
well  as  the  scalability  and  flexibility 
that  private  networks  have  never 
offered,  all  at  a  price  less  than  VPNs 
that  ride  the  public  Internet. 


www.xo.com 

Take  advantage  of  the  speed  and 
capacity  of  the  Internet  or  your  existing 
IP,  frame  relay,  or  ATM  infrastructure 
to  deliver  private  information  securely 
between  your  organization's  offices, 
business  partners,  customers,  suppli¬ 
ers,  and  local  and  remote  employees. 
With  XO™  VPN,  you  get  everything 
you  want  —  and  exactly  what  you 
need. 
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EXTRAORDINAIRE 

Six  of  our  columnists  select  the  year’s  most  innovative  products  and 
services  for  our  annual  Category-breaker  Award. 


McAfee  VirusScan  ASaP  managed  service 
Network  Associates.  Santa  Clara 
www.mcafeeb2b.com 

BY  WINN  SCHWARTAU,  “ON  SECURITY”  COLUMNIST 


It’s  about  time  for  faster  antivirus  methods 

@  H  the  'deal  world,  new  computer  viruses  would  never  get  the 

|1|  ■  chance  t( >  attack  corporate  desktops.  But  in  the  real  world, 

nl  where  traditional  antivirus  procedures  dominate,  they  usu- 
|a|  ||  ally  do. That’s  because  to  stop  a  virus,  antivirus  companies 

®  Pi  must  develop  antidotes,  then  distribute  the  updated  signa- 

ture  files  to  their  clients,  who  then  must  update  all  their 
internal  servers  and  the  thousands  of  workstations  they  service. 

And  all  this  takes  time.The  more  time  it  takes  for  an  update  to  reach  the 
desktop,  the  more  vulnerable  the  company’s  network  is  to  the  infection  —  a 
value  the  security  world  calls  “reaction  time.” 

But  Network  Associates  has  developed  technology  that  offers  significantly 
better  reaction  time.The  technology  called  Rumor,  uses  a  unique  peer-to-peer 
distribution  model  instead  of  the  traditional  network-  and  bandwidth-hogging 
client/server  model  of  centralized  update  distribution. 

Rumor,  through  Network  Associates’  McAfee  VirusScan  ASaP  managed  ser¬ 
vice,  regularly  updates  a  company’s  enterprise  antivirus  server.  When  the  first 
workstation  logs  on,  part  of  the  start-up  routine  runs  the  Rumor  antivirus 


agent,  which  verifies  that  the  workstation  is  running  the  latest  version.  If  not, 
the  server  sends  the  upgrade. 

This  desktop’s  reaction  time  for  antiviral  defense  is  superb.  ASaP’s  Rumor 
doesn’t  let  the  computer  do  anything  until  its  antivirus  software  is  updated  — 
invisibly  to  the  user.  When  the  logon  process  is  completed  and  e-mail  is  down¬ 
loaded,  the  user  is  already  protected. 

On  a  typical  morning,  several  hundred  or  thousands  of  people  attempt  to 
log  on  in  a  short  period  of  time.  A  bottleneck  results  if  every  desktop  in  a 
company  contacts  the  antivirus  server  at  that  time. 

With  ASaP  Rumor,  the  antivirus  server  only  responds  to  the  first  few  user 
requests  for  updates.  When  subsequent  desktops  log  on,  they  broadcast  to  the 
network, “Does  anyone  have  anything  new  to  tell  me  about  viruses?”  An 
updated  desktop  can  respond  and  supply  the  new  code.  And  all  this  will 
occur  before  any  offending  virus  can  cause  infection. 

Rumor  is  a  true  peer-to-peer  distribution  model,  completely  emulating  the  way 
rumors  are  spread  among  people.  Rumor  clients  also  use  strong  authentication 
mechanisms  to  track  their  activities  and  to  ensure  that  the  latest  and  greatest 
update  is  the  one  being  distributed. 

The  VirusScan  ASaP  service  starts  at  $36  per  year,  per  user. 

Using  Network  Associates’ ASaP  Rumor  approach,  protecting  computers 
from  viruses  before  they  spread  is  achievable.  At  the  heart  of  the  Rumor 
approach  is  a  security  model  called  Time  Based  Security.  It  provides  a  strong 
methodology  and  simple  mathematics  by  which  security  can  be  measured, 
compared  and  improved. 

Schwartau  is  the  president  of  Interpact,  a  security  awareness  consulting  firm  in 
St.  Petersburg,  Fla.,  and  the  author  of  many  books,  including  Time  Based 
Security.  He  can  be  reached  at  winns@gte.net. 


Serving  up  terrorist-resistant  collocation 

Equinix’s  Internet  Business  Exchange  service  clearly  stands  out  in  a 
crowded  market  of  Internet  collocation  offerings. 

1BX  is  a  multitenant,  fully  redundant  collocation  service  for 
bringing  ISPs  and  content  providers  together  in  one  facility  to 
make  the  connections  they  desire.Think  of  it  as  the  neutral  Swiss 
version  of  the  Internet  equipment  hosting  model  —  pure  service 
and  access  to  anybody,  an  ideal  hybrid  of  the  original  Internet  interconnect 
points  and  hosted  offerings. 

Unlike  Exodus  Communications  and  others  in  its  field,  Equinix  has  no 
backbone  network  to  connect  its  disperse  facilities  in  Washington,  D.C., 
New  York,  Silicon  Valley,  Chicago,  Dallas  and  other  sites.  Rather,  each  facil¬ 
ity  is  a  stand-alone  entity. 

Without  the  backbone  overhead,  Equinix  has  simplified  network  manage¬ 
ment  while  eliminating  an  important  potential  bottleneck  from  customer  net¬ 
work  designs.  Equinix's  staff  can  focus  on  maintaining  customers'  stored 
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Equinix,  Mountain  View,  Calif. 
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BY  FRED  MCCLIMANS,  “KEEPING  CURRENT”  COLUMNIST 


equipment  rather  than  on  tracking  down  the  sources  of  outages. 

Service  providers  using  IBX  can  connect  to  other  service  providers  via  a 
high-speed  Gigabit  Ethernet  switching  system  —  Foundry  Networks’  Biglron 
8000  —  within  each  facility.  Web  hosting  (data  and  content)  providers  can 
use  the  same  core  switching  system  to  access  the  ISP  of  their  choice  or  even 
to  get  direct  access  to  other  content  providers  for  partnership  offerings.  If  a 
service  provider  wanted  to  bypass  Equinix’s  Gigabit  Ethernet  switch  and 
bring  its  own.it  could  do  that,  too. 


The  Best  Issue  2001 


www.nwfusion.com/best2001 
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AND  SERVICES 


While  many  hosting  facilities  have  beefed  up  security  procedures,  Equinix 
stands  out  for  its  security,  it  worked  closely  with  the  designers  of  the  Federal 
Reserves  security  system  and  built  bona  fide  hardened  facilities  designed  to 
withstand  terrorist  attacks.  Its  security  procedures,  including  everything  from 
reinforced  bunker-style  facilities  and  biometric  access,  have  just  about  every¬ 
thing  short  of  a  brain-scan  system. 

This  service,  deployed  in  mid-2000,  really  made  its  mark  on  the  Internet 
earlier  this  year.  Equinix  has  compiled  an  impressive  list  of  customers  and 
partners  for  the  service:  MSN,  Global  Crossing,  Motley  Fool,  Sigma  Networks, 
Williams  Communications, Yahoo,  IBM  and  E&Y 
Unlike  most  ISPs  and  traditional  hosting  firms,  providing  neutral  collocation 
services  is  Equinix’s  only  function,  but  it  is  a  function  it  performs  extremely  well 
—  and  cost  effectively  Fees  range  from  the  low  thousands  of  dollars  to  hun- 


e&t 


dreds  of  thousands  per  month,  but  are  at  least  half  the  cost 
of  building  a  similarly  secured  in-house  facility. 

In  short,  the  IBX  is  a  nice,  tight  offering  that  is  unique  and  nec¬ 
essary  in  today’s  turbulent  world. The  downside  is  that  Equinix  — 
along  with  just  about  every  other  hosting  company  —  has  yet  to  master 
profitability.  But  that  may  shift  dramatically  with  the  recent  change  in  global 
security  requirements. 

IBX  certainly  stands  out,  and  its  business  model  is  worthy  of  my  vote  as  break¬ 
through  service  of  the  year. 


McClimans  is  the  managing  director  of  technology  analyst  firm  Fearless 
Ventures  and  the  chairman  of  Current  Analysis.  He  can  be  reached  at  fmccli 
mans@fearlessventures.  com. 
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BY  BETH  GAGE,  “THE  BLEEDING  EDGE”  CO-COLUMNIST 


Maximizing  bandwidth  while  lowering  costs 


The  economy  has  clearly  gyrated  into  a  “make-do”  phase.  Carriers 
and  service  providers  have  stopped  or  postponed  major  new  net¬ 
work  buildouts  to  look  hard  at  improving  existing  infrastructures 
with  minimal  expense.  Getting  more  out  of  Internet  or  WAN  con¬ 
nections  can  delay  the  need  for  adding  bandwidth  while  keeping 
performance  at  acceptable  levels. 

A  new  category  of  network  products  promises  to  do  just  that.These  “route 
control”  or  “route  optimization”  products  are  all  about  directing  IP  traffic 
according  to  criteria  such  as  performance,  price  and  time  of  day.  RouteScience 
Technologies,  a  relative  newcomer  to  the  network  scene,  is  delivering  such  a 
product  to  carriers  and  corporations. 

RouteScience’s  PathControl  is  an  Internet  route  control  device  that  measures 
real-time,  end-user  path  performance  across  all  available  ISP  links  and  thereby 
helps  edge  routers  make  better  routing  decisions.The  measurement  process  is 
completely  passive  (no  active  pings  required),  automated  and  performed  in 
real  time  with  minimal  network  overhead.  PathControl  analyzes  the  perfor¬ 
mance  data  and  determines  the  best  ISP  links  based  on  performance  metrics 


and  user  preferences.  For  example,  customers  can  designate 
lower-cost  ISP  links  to  be  favored  over  higher-cost  links  ex¬ 
cept  when  performance  falls  below  specified  thresholds. 

PathControl  can  send  route  updates  to  edge  routers  using 
the  standard  Border  Gateway  Protocol.  Updates  can  be  sent 
when  Internet  conditions  change  or  as  often  as  network  man¬ 
agers  would  like.  If  a  PathControl  box  goes  down,  the  network 
will  not  be  impacted  —  only  the  optimization  is  lost. 

PathControl  also  reports  on  ISP  performance  and  the  route 
optimization  results. 

Route  optimization  can  save  money  in  several  ways.  Most 
obviously,  it  can  reduce  bandwidth  requirements.  Many  com¬ 
panies  aim  to  use  only  50%  to  60%  of  their  available  band¬ 
width,  on  average,  to  ensure  the  network  can  accommodate 
traffic  bursts.  With  route  optimization,  network  managers  can 
allocate  traffic  more  evenly  across  different  network  routes 
and  therefore  use  80%  of  potential  bandwidth  on  average. 

Route  control  devices  might  be  a  good  addition  to  your  toolbox,  along  with 
other  network  improvement  approaches  (for  example,  adding  bandwidth  at 
network  bottlenecks,  compressing  traffic  and  implementing  class  or  quality  of 
services).  PathControl  is  one  of  the  first  out  the  door,  but  won’t  remain  the 
sole  offering  in  this  new  market.  NetVMG.Sockeye  and  others  are  preparing 
to  launch  competing  products. 

And  PathControl  isn’t  for  everyone  —  yet.  Prices  range  from  $140,000  to 
$250,000,  depending  on  the  network  configuration,  with  most  companies 
needing  one  or  two  PathControl  boxes. 

Gage  is  the  vice  president  of  consulting  at  TeleChoice.  She  can  be  reached  at 
bleedingedge@telechoice.  com. 
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Getting  to  work  with  innovative 
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A  better  way  to  perform  customer  care 

The  business  world  is  just  beginning  to  explore  operational  uses  of 
instant  messaging,  and  FaceTime  Communications  is  a  pioneer¬ 
ing  vendor  in  this  niche.  FaceTime  Instant  Message  Director  is  a 
category-breaking  product  for  combining  instant  messaging,  pres¬ 
ence,  workflow,  automated  call  distribution,  customer  relationship 
management  and  knowledge  management  into  a  collaboration 
customer  care  environment. 

The  product  supports  flexible  rules-driven  routing  of  instant  messages  to 
available  experts,  categorized  by  areas  of  expertise. These  experts  can  handle 
several  ongoing  problems  at  once  via  instant  messages.  Only  instant  messag¬ 
ing  technology  can  deliver  immediate,  detailed,  personal  feedback  of  the  type 
demanded  in  call-center  environments. 

Instant  Message  Director  consists  of  a  communications  server  and  a  call-center 
agent  application. The  server  provides  instant  messaging  and  presence,  using  a 
proprietary  protocol  that  connects  enterprise  users  who  employ  the  company’s 
proprietary  instant  messaging  client  software.  Presence  detects  who  is  online. 

The  serv  er  also  provides  an  instant  messaging/presence  gateway  for  con¬ 
necting  to  users  on  public  instant  messaging  services  such  as  AOL  Instant 
Messenger,  MSN  Messenger  and  Yahoo  Messenger.  Experts  therefore  may  be 
anywhere  in  the  world. 

The  vendor’s  call-center  application  software  includes  several  critical  pro¬ 
ductivity  features.  Installed  on  first-line  and  supervisor’s  desktops,  the  Face- 
Time  Enterprise  IM  Workstation  detects  the  presence  of  knowledge  experts, 
sends  and  receives  messages,  and  handles  concurrent  instant  messaging/chat 
sessions,  all  through  a  graphical  user  interface. 


FaceTime  Instant  Message  Director 


FaceTime  Communications.  Foster  City.  Calif. 
www.facetime.com 

BY  JAMES  KOBIELUS,  “ABOVE  THE  CLOUD”  COLUMNIST 


Agents  can  categorize  buddies/experts  by  their  knowledge  domains.They  can 
establish  three-way  chats  with  supervisors,  other  agents  and  experts. They  can 
automatically  retrieve  associated  customer  profiles  and  histories.  And  agents  can 
retrieve  other  pertinent  information  through  an  integrated  Web  browser  or  from 
a  canned  knowledge  library  that  can  be  built  within  the  FaceTime  environment. 

Call-center  supervisors  can  use  FaceTime  Enterprise  IM  Workstation  software 
to  define  complex  workflow  rules  that  specify  how  the  server  routes  and  esca¬ 
lates  messages  between  various  agents  and  knowledge  experts.  Supervisors  can 
track  transactions  between  agents  and  experts  in  real  time,  while  logging  all 
transactions  for  later  audit  and  analysis.They  can  broadcast  instant  messages  to 
all  agents,  and  monitor,  reassign  and  balance  agents’ workloads  in  real  time. 

Cost  is  determined  by  how  large  a  company  is.  A  perpetual  license,  at 
$90,000,  is  appropriate  for  midsize  to  large  companies  and  includes  on¬ 
premise  deployment  and  35  agent  seats.  Hosting  by  FaceTime  is  an  additional 

See  Wares,  page  82 
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Isn't  it  time  you  combined  your  separate  networks  into  one  powerful  and  integrated 
enterprise  network?  With  Cisco  IPTelephony,  you'll  cut  costs  and  discover  entirely  new 
ways  to  compete  -  enabling  a  whole  new  class  of  powerful  applications  never  before 
conceivable  on  separate  networks.  With  Cisco  AVVID  enterprise  architecture,  you  can  do 
all  this  without  any  disruption. This  standardized  enterprise  architecture  allows  you  to  seamlessly  integrate  voice,  video,  wireless 
and  data  applications  on  a  single,  scalable  network.  This  includes  new  and  existing  technologies  alike.  Whether  you're  building 
your  enterprise  network  or  extending  it  with  Cisco  Powered  Network  services,  take  advantage  of  the  tools  below  to  get  it  done  right. 


Portals: 

Build  Them  Right 
And  They  Will  Come 

Fast  on  their  way  to  becom¬ 
ing  the  primary  way  profession¬ 
als  share  and  obtain  information, 
portals  are  red  hot  within  organi¬ 
zations  today.  But  to  paraphrase 
a  popular  movie,  if  you  build  a 
portal,  will  they  come?  And  if 
users  come,  will  they  stay? 

The  short  answer  is,  “not 
necessarily.”  The  reason  is  that 
firms  don’t  always  take  a  true 
customer-centric  approach  to 
building  portals  to  assure  an 
optimal  user  experience. 

Moreover,  firms  frequently 
underestimate  the  complexity 
of  integrating  legacy  data  and 
other  information  sources  to 
be  linked  with  portals. 

"When  building  portals,  you 
need  to  think  in  terms  of  end  to 
end  business  outcomes  and  the 
complete  lifecycle,”  notes  Terry 
Hisey,  V.  P.  and  G.  M.,  e-Business 
at  Unisys.  “The  corporate  portal 
begins  with  an  alignment 
between  business  and  portal 
strategies  incorporating  the  right 
information  from  whatever 
source,  and  delivering  it  in  a 
productive  and  time-sensitive 
manner  to  a  personalized  inter¬ 
face.”  It’s  all  about  browsing, 
searching,  and  finding  relevant 
content  to  improve  productivity 
and  collaboration. 

To  make  this  dream  a  reality 
for  clients,  Unisys  has  com¬ 
bined  its  rock-solid  experience 
in  consulting  and  integration 
with  breakthrough  patent- 
pending  methodologies.  To 
learn  how  Unisys  can  help 
conceive,  build  and  manage 
world-class  portals,  visit: 
www.aheadforebusiness.com 
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$3,350  per  month  plus  a  one-time  provi¬ 
sioning  fee  of  $5,000.  Application  service 
providers  can  expect  to  pay  $5,000  per 
month  for  up  to  15  agents  with  incre¬ 
mental  fees  for  additional  agents  or 
larger  agent  block  packages. 

Also  impressive  is  the  string  of  busi¬ 


ness  alliances  FaceTime  has  established 
to  evolve  Instant  Message  Director  into  a 
more  sophisticated  call-center  tool. 
These  include  relationships  with  the 
leading  CRM  vendors  (Siebel  Systems 
and  PfeopleSoft),  Internet  telephony  ven¬ 
dors  (Cisco  and  Lucent)  and  self-service 
knowledgebase  providers  (Ask  Jeeves 
and  Asklt). 

All  of  these  activities  demonstrate  that 


FaceTime  is  com¬ 
mitted  to  maintaining 
its  first-mover  advantage  in 
the  exciting  new  market  for 
instant  messaging-enabled  call-cen¬ 
ter  applications. 

Kobielus  is  an  Alexandria,  Va.,  analyst 
with  The  Burton  Group.  He  can  be 
reached  at  jkobielus@tbg.com. 
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BY  DAVE  KEARNS,  “WIRED  WINDOWS”  COLUMNIST 

Mgmt.  for  the  guerrilla  operating  system 


any  people  would  con¬ 
sider  the  phrase  “man¬ 
aged  Linux”  an  oxy¬ 
moron.  After  all,  Linux  is 
seen  as  the  “guerrilla”  of 
operating  systems.  It 
comes  in  through  the  back  door,  is  set 
up  surreptitiously  and  then  hidden  from 
the  CIO  and  other  management  types. 

Caldera  Systems  wants  to  change  all 
that  with  its  new  Volution,  which  pro¬ 
vides  secure,  remote  management  for 
Linux  systems.  Hierarchical  manage¬ 
ment  —  for  Linux!  That’s  not  only  a  cat¬ 
egory-breaker,  it’s  a  category-maker. 

Volution  is  a  directory-enabled  dis¬ 
tributed  management  product.  In¬ 


cluded  with  the  package  is  a  copy  of 
Novell’s  eDirectory  and  a  copy  of 
OpenLDAP  —  the  open  source  Light¬ 
weight  Directory  Access  Protocol- 
enabled  directory  service. 

This  is  the  first  Linux-based  package  that 
combines  the  features  of  multiple  single¬ 
issue  utilities  in  the  areas  of  remote 
health  monitoring,  hardware  inventory 
and  software  distribution.  And  it’s  not  only 
for  Calderas  Linux  distribution, but  also 
distributions  from  most  other  major  Linux 
players,  covering  multiple  releases. 

Volution  is  a  policy-based  manage¬ 
ment  system  that,  among  its  many  fea¬ 
tures,  provides  secure  Web-based  man¬ 
agement,  electronic  software  distribu¬ 


tion,  hardware  inventory,  software  inven¬ 
tory,  health  monitoring  of  Linux  systems 
and  Linux  printer  configuration. 

Volution  includes  a  scheduler  based  on 
a  global  event  system  that  lets  actions  be 
scheduled  for  a  point  in  time,  repeated 
time  intervals,  a  local  event  or  a  global 
event.The  software  and  hardware  inven¬ 
tory  data  is  searchable, simplifying  man¬ 
agement  and  making  software  distribu¬ 
tion  easier.  Distribution  can  be  further 
simplified  through  the  creation  of  logical 
groups  within  the  LDAP-enabled  direct¬ 
ory  store  used  by  Volution  for  its  policy 
management. 

Volution  costs  $3,000  for  the  server 
plus  10  nodes  and  $121  per  additional 
node. 

The  important  thing  is  that  Volution 
marks  almost  a  “coming  of  age”  for 
Linux.The  management  utilities  your 
CIO  wants  to  see  for  business-critical 
operating  systems  are  now  available  for 
Linux  in  a  policy-driven,  directory- 
enabled  package. 

Kearns,  a  former  network  administrator, 
is  a  freelance  writer  and  consultant  in 
Austin,  Texas.  He  can  be  reached  at 
wired@vquill  com. 


Eliminating  the  dual- 
PC  telework  syndrome 

big  inhibitor  to  part-time 
telework  is  the  equipment 
cost.You’re  faced  with  pro¬ 
viding  a  second  PC  for 
home  use  or  letting  tele 
workers  shuttle  work  be 
tween  corporate  and  personal  comput¬ 
ers.  While  the  latter  won’t  cost  your  com¬ 
pany  money  outright,  it  could  cost  you 
plenty  in  lost  productivity  (should 
employees  forget  or  fail  to  transfer  the 
files  they  need)  or  lost  security  (should 
workers  put  sensitive  corporate  data  on 
a  personal  PC  connected  to  the  Web  via 
an  insecure  DSL  or  cable  connection). 

Expertcity’s  GoToMyPC  solves  the  two- 
PC  problem  by  letting  you  use  just  one. 
For  about  $12  per  month  for  individual 
users,  the  Web-based  service  lets  you 
access  the  data,  applications  and  even 
printers  of  one  PC  via  another  PC  and 
Web  connection. 

You  download  a  small  client  applica¬ 
tion  onto  the  target  PC. The  idea  is  that 
all  office  applications  and  data  stay  on 
the  office  system,  with  nothing  trans¬ 


ferred  to  the  home  PC. 

GoToMyPC  is  secure.The  session 
between  the  host  and  remote  PC  is  128- 
bit  encrypted.  Unlike  VPNs  or  remote 
access  products,  such  as  pc  Anywhere, 
which  let  a  remote  PC  act  as  a  node  on 
the  network  with  the  same  privileges  as 
any  in-office  system,  GoToMyPC  limits 
the  remote  worker’s  access  to  the  host 
system  only  —  no  danger  of  unautho¬ 
rized  network  access.  All  the  personal 
PC  is  doing  is  receiving  screen  images 
of  what’s  displayed  on  the  host  system. 

What’s  more,  because  it’s  a  Web  appli¬ 
cation  and  not  peer-to-peer,  GoToMyPC  is 
faster  than  pcAnywhere  and  works  well 
over  slow  and  fast  connections  alike. 

The  telework  community  loves 
GoToMyPC  because  it  enables  quick 
and  dirty  telework  at  minimal  cost. The 


International  Telework  Association  and 
Council  recently  awarded  GoToMyPC 
the  Outstanding  Innovation  in 
Telework  Award. 

Expertcity  says  individual  subscribers 
already  number  in  the  tens  of  thou¬ 
sands,  and  Sprint  is  expected  to  roll  out 
a  co-branded  version  this  month.  What’s 
more,  the  company  is  fast  winning  the 
confidence  of  enterprise  IT  shops. 

Expertcity’s  corporate  product  ($250 
for  10  users)  includes  administrative 
tools  that  let  you  monitor  and  control 
traffic  flow  and  users’  access.  And  an 
enterprise  (500-plus  users)  version  that 
works  with  RSA  Security’s  SecurlD  and 
other  authentication  systems  is  due  out 
in  January.® 
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How  do  we  take  your  current 
communications  capabilities  even  further? 


uilding  for  the  future  is  no  easy  task.  As  your  strategic  partner,  Unisys 
can  help  you  generate  new  revenue  with  our  knowledge  of  technology 
and  scalable  solutions  that  maximize  what  you  already  have.  In  fact,  9 
out  of  10  of  the  world’s  largest  telecommunications  companies  rely  on 
Unisys  to  grow  and  manage  their  business.  There’s  no  one  better  suited 
to  help  you  evolve  to  wireless  broadband,  multimedia  messaging  and 
other  next-generation  solutions.  With  Unisys,  getting  to  the  leading  edge 
isn’t  just  a  pipe  dream.  Visit  us  at  www.aheadforebusiness.com. 


SNMP  Research  International 
(865)  579-3311 

www.snmp.com 

SNMP  Research,  the  world's  leading 
vendor  of  Internet  management  tech¬ 
nology,  provides  innovative  solutions 
for  secure,  standards-based  manage¬ 
ment  of  networks,  systems,  and 
applications.  All  products  support 
SNMPvl,  SNMPv2,  and  SNMPv3 
with  security  and  administration. 
SNMP  Research's  customers  include 
most  of  the  largest  companies  in  the 
computer  and  telecommunication 
industry. 
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Colubris  Networks 


Colubris  Networks,  Inc. 

(450)  680-1661 

www.colubrisnetworks.com 
The  CN1050  family  of  Wi-Fi  certified 
wireless  LAN  routers  are  the  perfect 
solution  for  enterprises  wanting  to 
deploy  wireless  LANs  but  are  con¬ 
cerned  about  security.  With  integrated 
Router,  comprehensive  Firewall  and 
integrated  IPSec/L2TP  technology, 
the  CN1050  provides  unparalleled 
security  for  Enterprises  of  all  sizes. 
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Websense,  Inc. 

Websense  Enterprise 

(800)  723-1166/(858)  320-8000 

www.websense.com 
Websense  Enterprise  is  the  leading 
employee  Internet  management 
(EIM)  solution,  used  by  more  than 
15,000  organizations  worldwide, 
including  255  of  the  Fortune  500.  As 
a  server-based  software  solution, 
Websense  allows  you  to  transparently 
monitor,  manage  and  report  traffic 
flowing  from  your  internal  networks 
to  the  Internet.  Websense  Enterprise 
helps  your  company:  conserve  pre¬ 
cious  network  bandwidth  resources, 
reduce  legal  liability,  boost  employee 
productivity,  and  enforce  your  existing 
Internet  access  policy. 


VNCI 


VNCI 

(800)  763-8099 

www.vnci.net 

Video  Network  Communications,  Inc. 
provides  the  highest-quality,  feature- 
rich  video  networks  available  today  — 
making  video  as  easy  as  using  the 
telephone.  VNCI's  Java-based  Visual 
Networks  help  top-tier  customers 
realize  dramatic  time  and  cost  savings 
by  delivering  local/wide  area  video- 
conferencing,  broadcast,  streaming, 
and  video-on-demand  to  thousands  of 
desktops  —  without  upgrading  net¬ 
works  or  PCs. 


AN  efforts  have  been  made  to  make  this  listing  as  complete  and  accurate  as  possible.  Network  World  is  not  liable  for  errors  or  omissions. 
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THE  BEST  WAYS  TO  AVOID 

BURNOU' 


IT  execs  reveal  how  they  get  the  most  from  their  staffs  without  turning  them  to  toast. 


Wt  hen  Management  Recruiters 
International  redesigned  its 
Web  site  this  summer,  the  IT 
staff  camped  out  in  their 
offices  and  consumed  Red 
Bull  by  the  case. 

“We  certainly  had  a  whole 
group  of  people  here  who  were  on  the  edge  of  burn¬ 
out,”  says  Neil  Fox, CIO  of  the  executive  search  firm  in 
Cleveland.“People  became  irritated, some  of  the  sup¬ 
port  staff  would  break  into  tears,  they  were  just  gen¬ 
erally  overworked  and  overstressed.” 

When  the  site  went  live,  MRI  quenched  the  burn¬ 
out  by  sending  the  IT  department  to  a  nearby  park 
for  steam-relieving  volleyball  and  softball  matches. 
Many  of  the  company’s  32  IT  workers  also  got  the 
following  day  off  to  recharge  before  tackling  the 
hundreds  of  enhancements  planned  for  the  site. 

Fox  says  such  moves  help  during 
crunch  times,  but  he  really  credits 
his  staff’s  high  motivation  to  a 
work  environment  that’s  con¬ 
stantly  supportive,  understanding 
and  fun. “One  of  my  goals  is  to 
make  sure  everyone  feels  a 
sense  of  ownership  and 
that  they’re  making  a  signifi 
cant  contribution,”  he  says. 

Employees  who  lack  this  sense 
of  engagement  are  ripe  for  chron 
ic  physical  and  psychological 
exhaustion,  otherwise  known  as 
burnout.  Long  hours,  stress  and  tight 
deadlines  are  already  common  to  IT,  but 
thanks  to  the  soft  economy,  burnout  is  on 
the  rise.  Downsizing  and  budget  cuts  could 
reduce  your  staff  to  toast. 

Contrary  to  popular  belief,  work  overload  L 

isn’t  the  only  cause  of  burnout.  Michael  Leiter, 
vice  president  of  Acadia  University  in  Nova  £ 

Scotia,  Canada,  and  co-author  of  The  Truth  About 
Burnout,  says  these  five  factors  work  in  conjunction 
to  create  frustrated,  less  productive  IT  workers: 

•  Lack  of  control.  Does  your  staff  have  autonomy 
to  decide  what  to  do  and  how  to  do  it? 

•  Sparse  rewards  and  recognition.  Do  you  com¬ 
pensate  your  staff  enough  and  acknowledge  their 
accomplishments? 

•  A  weak  community.  Do  employees  have  good 


BY  AMY  SCHURR 

relationships  and  respect  each  other? 

•  Subjective  criteria  for  career  advancement.  Are 
you  fair  about  deciding  who  gets  raises,  promotions 
and  training? 

•  Incongruous  work  ethics.  Do  the  company’s  val¬ 
ues  match  employees’  ? 

“It’s  a  matter  of  how  the  person  and  the  work  envi¬ 
ronment  are  getting  along  with  each  other”  Leiter 
says.  He  tells  of  one  company  where  IT  professionals 
were  cynical  and  apathetic  because  they  didn’t 
believe  training  opportunities  were  being  allocated 
fairly  In  another  firm,  poor  communications  from 
upper  management  about  business  decisions  put 
techies  on  the  verge  of  burnout.  Something  as  simple 
as  an  internal  newsletter  solved  the  problem. 

Balance  is  the  incantation  that  wards  off  burnout 
at  Bose,  the  electronics  maker  in  Framingham, 
Mass.“We’re  a  culture  of  hard-working  people, 


there’s  no  doubt  about  that,  but  we  also  recognize 
an  employee’s  personal  time  and  family  time," says 
CIO  Rob  Ramrath. 

More  than  half  of  the  IS  department’s  140  staffers 
take  advantage  of  family-friendly  work  arrangements 
such  as  flex  time,  telecommuting  and  compressed 
work  weeks.“Being  flexible  with  your  team  and  trust¬ 
ing  them  goes  a  huge  wa^’  Ramrath  says. 

Along  with  skills  training  and  professional  devel¬ 
opment,  Bose  emphasizes  rewards  and  recognition. 
Awards  run  the  gamut  from  candy  bars  to  free  Bose 
merchandise.  When  IS  rolled  out  an  enterprise  re¬ 
source  planning  system  in  July,  Bose’s  executive 
vice  president  spoke  at  an  awards  ceremony  about 
the  importance  of  the  project  and  greeted  many  of 
the  IT  staff  by  name. 

To  reduce  stress  in  the  IT  department  at  Lake 
Shore  Technical  College  in  Cleveland,  Wis.,  the 
school  outsourced  Lotus  Notes  and  other  applica¬ 
tions  and  automated  parts  of  its  help  desk.  Michael 
Lanser,vice  president  of  education  sup¬ 
port,  first  spotted  trouble  when  an  IT 
manager  started  being  short  with  end 
users  and  was  frequently  missing 
work.  He  solved  the  problem  by  scal¬ 
ing  back  the  employee’s  workload 
and  setting  priorities  during  a  weekly 
meeting. 

Then  Lanser  adjusted  the  help  desk 
rotation  schedule  so  staffers  log  only 
SB  one  day  per  week  as  the  primary 
contact,  working  on  other  projects 
w  and  serving  as  backup  the  rest  of  the 
week.  He  assigned  employees  their 
own  offices,  and  gave  students  access  to 
an  online  tech  support  database,  which 
reduced  the  number  of  help  desk  calls,  he 
recounts. 

The  message  from  those  who  have  success¬ 
fully  thwarted  staff  burnout  is:  No  matter  how 
much  you  throw  at  your  own  IT  department,  let 
them  know  these  tough  times  will  be  short-lived. 
“People  can  work  very  hard  for  an  extended  per¬ 
iod  if  they  have  an  understanding  of  where  they’re 
going,"  Leiter  says. 

Ramrath  agrees,  noting, “You  can  get  people  to 
pull  with  you  for  short-duration  work  needs  if  they 
perceive  that  over  the  long  haul,  things  are  bal¬ 
anced  and  it’s  not  just  a  one-way  relationship.”® 
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Server  Management 

Total  Solution  Starts  Here... 


CONTROL  IT 

SECURE  IT 

MANAGE  IT 

FROM  ANYWHERE 


ROSE  ELECTRONICS  KVM  switches  allow  single 
or  multiple  workstations  to  have  local  or  remote 
access  to  multiple  computers  located  in  server 
rooms  or  on  the  desktop. 

ROSE  is  a  leading  KVM  switch  manufacturer  with 
the  most  complete  range  of  server  management 
products.  A  KVM  industry  pioneer,  Rose  is  known  for 
its  technically  superior  and  price  competitive 
products. 

From  simple  access  to  complex  configurations, 

Rose  provides  easy  server  management  solutions. 


MULTI-USER  FIXED  CHASSIS 


UltraMatrix™  E-series 

Professional  multi-user  KVM  switch 
2  -  4  KVM  stations  to  1,000  computers 
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MULTI-USER  EXPANDABLE  CHASSIS 

UltraMatrix™  X-series 

Enterprise  class  multi-user  KVM  switch 
4  -  250  KVM  stations  to  1,000  computers 


ROSE  ELECTRONICS 

10707  Stancliff  Rd. 
Houston,  Texas  77099 


UltraLink™ 

KVM  digital  remote  access 
over  Ethernet  or  modem 

■  Connect  to  remote  computer  over  Ethernet  or  dial-up 

■  Local  KVM  port  to  access  computers  at  UltraLink 
unit 

■  Modem  port  with  dial-back  security 

■  Up  to  1280x1024  resolution,  supports  all  platforms 

■  Easy  to  install,  give  it  an  IP  address  and  run  the 
remote  client,  no  licensing  required 

■  Scaling  of  computer  image  reduces  amount  of  data 
sent  and  permits  fast  screen  updates  over  slow  links 

■  Quad  screen  mode  allows  you  to  see  four  servers 
from  one  screen 

■  SSL  security  and  passwords  prevents  unauthorized 
access 


800-333-9343  281-933-7673 


VIDEO  DISTRIBUTION 


VideoSplitter™ 

One  or  two  computers 
to  multiple  monitors 


CONVERTER 

Translater™ 

Keyboard  mouse  converter  for  Sun, 

Apple,  DEC  Alpha,  or  SGI  Onyx  KVM  converters 


# 


ELECTRONICS 


USA  .  CANADA  .  ENGLAND  .  GERMANY  .  FRANCE  .  BENELUX  .  AUSTRALIA  .  SINGAPORE 


WWW.ROSE.COM 
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network  uptime 

is  your  life... 


power  management 

solution  is  your  life  saver. 


•  Real  life  questions: 


How  much  power  is  my  equipment  using? 

Am  I  about  to  trip  the  circuit  breaker? 

What  is  the  temperature  of  my  cabinet? 

How  do  I  reboot  locked  servers  from  5000  miles  away? 


Real  life  answers: 


BayTech  power  management  solutions  with  a  return  on 
investment  that  just  makes  sense. 


You  no  longer  need  to  be  there  to  reboot  locked  routers, 
SNMP  traps  are  generated  when  you  reach  your  circuits 
capacity,  and  power  measurement  is  instantaneous. 


Reducing  downtime  and  costs  is  no  longer  a  luxury,  its  a 
requirement.  With  BayTech  remote  site  management 
solutions  you  will  not  only  do  both,  you  will  always  have 
instantaneous  access  to  your  equipment,  anytime  from 
anywhere. 


Horizontal  solutions  with 
direct  network,  serial,  or 
modem  access 


New  Zero  U  Solutions 
with  up  to  20  receptacles 

per  unit  at  up  to  30  amps 


www.baytech.net 
1-800  523-2702 


BayTech 


yep,  actual  size  (111)  8  users  -  32  servers 


Remove  from  box. 
Insert  Cat  5  cable. 
Manage  lOO’s  of 


servers. 


Paragon!®,  the  KVM  switch  that's  a  major  breakthrough  in 
out-of-band  server  access  and  control  for  large-scale  data 
centers.  Its  distributed,  scalable  architecture  eliminates  any 
single  point  of  failure  and  provides  fail-safe  access  to 
hundreds,  or  even  thousands  of  servers.  Using  Raritan's 
advanced  Cat5  transmission  technology,  Paragon  supports 
direct  connections  up  to  1 ,000  feet  with  a  single  Category  5 
cable.  Add  Raritan's  TeleReach  for  remote  access  over  IP  via 
LAN,  Internet  or  dial-up  modem,  and  you've  got  the  local 
and  remote  KVM  solution  that  just  won  Network 
Computing's  prestigious  Editor's  Choice  (4/30/01). 
Management  of  high-density  server  environments  has  never 
been  this  easy. 


Intelligent  KVM  Switch  Technology. 

Kyi, 

S  Raritan 

www.raritan.com 


EDITOR'S  CHOICE 


800-724-8090  x15 


Rantan  and  Paragon  are  registered  trademarks  of  Raritan  Computer,  Inc 
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The  Hub  of  the  Network  Buy 


New  Charge-UPS*  programs  provide  "Bumper 
to  Bumper"  overhaul  for  aged  UPS  units 

APC's  family  of  upgrade  programs  helps  customers  revitalize  older  Smart-UPS®  and  Back-UPS®  units 


IT  Managers  that  have  recently  upgraded  to  new  server  technology  now  have  options  to  help  eliminate  costly  downtime.  APC's  new  Charge-UPS  and 
Charge-UPS  EX  programs  provide  end-users  the  ability  to  inexpensively  refurbish  existing  APC  UPS  units  to  "like-new"  conditions. 


APC’s  new  Charge-UPS  program  is  an  easy  and 
inexpensive  way  for  customers  to  upgrade  their 
current  power  protection  and  management  to  run 
just  like  new,  simply  by  replacing  their  old  batteries 
with  a  new  premium  battery. 

Additional  Benefits 

Charge-UPS  also  offers  a  pre-paid  package  for 
proper  disposal  of  old  batteries  and  shipping  via 
FedEx  if  a  problem  should  arise  with 
the  UPS  unit.  Charge-UPS  users 
will  also  receive  a  FREE  30-day 
trial  of  APC’s  new  PowerChute 
Inventory  Manager  software,  a 
Web-based  inventory  management 
and  reporting  tool  for  network 
administrators.  This  award-winning  soft¬ 


ware  allows  users  to  maximize  the  availability  of  the 
network  by  proactively  diagnosing  the  health  of  APC 
UPSs  across  a  wide-area  network. 

APC  also  offers  the  Charge-UPS  EX  program,  which 
benefits  users  that  do  not  want  to  handle  battery 
replacement  themselves  or  who  require  special 
service  for  their  UPS  (as  in  the  case  of  older  APC 
UPSs  that  do  not  feature  user-replaceable  batteries). 
The  program  includes  all  the  benefits  of  the 
Charge-UPS  program  plus  an  additional  service  option. 

Upgrading  to  a  New  UPS?  Try  APC  Trade-UPS! 

For  customers  interested  in  upgrading  to  a  new  UPS, 
APC's  Trade-UPS  program  offers  a  40%  discount 
on  a  new  system  up  to  two  times  the  VA  (volt 
amps)  of  their  current  UPS,  or  the  ability  to  trade  in 
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multiple  UPSs  for  a  larger  system  with  the 
latest  APC  UPS  technology  -  all 
regardless  of  the  manufacturer 
of  the  old  UPS.  In  addition,  con¬ 
sumers  benefit  from  substantial 
savings  on  many  APC  UPS 
accessories  when  purchasing 
them  along  with  the  new  UPS. 

APC's  new  Charge-UPS  program  is  currently 
available  at  an  estimated  resale  price  range  of  $75 
to  $550.  APC  Trade-UPS  is  currently  available  in  the 
United  States  and  Canada. 


For  more  information  about  APC's  array  of 
Legendary  Reliability’"  products  and  services,  visit 
us  at  http://www.apc.com  or  call  the  number  below. 


Legendary  Reliability" 


Learn  more  about  which  APC  Charge-UPS®  program  is  right  for  you.  Visit  us  today! 

Visit:  http://promo.apc.com  •  Key  Code  a793y  •  Call  888-289-APCC  x6294  •  Fax  401-788-2797 

©2001  American  Power  Conversion.  All  Trademarks  are  the  property  of  their  owners.  APC1J1EP-US  •  PowerFax:  (800)  347-FAXX  •  E-mail:  apcinfo@apcc.com  •  132  Fairgrounds  Road,  West  Kingston,  Rl  02892  USA 


§  With  Style. 

Now  design  flair,  flexibility  and 
comfort  into  your  data  center 
with  NOC  Vision™  from 
C  J  Modular  construction,  numerous 

configuration  possibilities,  multiple 
r  1  tiers,  accents  in  your  company's 
colors  and  many  other  unique 
features  compliment  any  work 
environment.  Create  a  command 

1 _  bridge  that's  a  perfect  melding  of 

function  and  style. 
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Ask  about  our 
Free  site  survey. 
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100  Progress  Parkway,  PO  Box  431,  Conklin,  NY  13748 


Manufacturing  technical  furniture  solutions 
for  the  data  centers  of  today... and  tomorrow! 

A  wholly-owned  subsidiary  of  Fisher  Hamilton  L.L.C. 


GET  YOUR  DREAM 
ENCLOSURE  SOLUTION 
IN  15  DAYS  OR  LESS. 


Vented  top  panel 
incorporates  dual 
2.5"  x  6"  cable 
access  openings. 


Internal  cable  manage¬ 
ment  accessories  allow 
users  to  establish  efficient 
and  organized  connectivity 
solutions. 
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Fully-vented  doors  are 
available.  All  door  styles 
can  be  readily  changed 
to  hinge  from  either  the 
left  or  right. 


Innovative  cable  entry 
design  at  the  bottom  of 
the  cabinet  provides 
users  with  flexibility  and 
unequaled  wire 
management  access. 


Rugged  anti-tip  plates 
can  be  mounted  on  the 
front  or  rear  of  the  cabinet 
Reversing  the  plate  allows 
for  easy  stowing  when 
not  in  use. 


Side  panels  lift  off  for 
fast  and  easy  access,  and 
are  available  in  either 
solid  or  vented  versions. 


Top  fan  panel  boosts  air 
circulation  within  the 
cabinet.  A  separate  cable 
access  panel  keeps  wiring 
in  place  during  routine 
maintenance. 


Caster,  leveler  mounting 
and  grounding  capabilities 
are  integrated  directly  into 
the  cabinet  structure. 


It's  a  reality  made  possible  by  Emcor's  new  isoNet™  enclosure  system. 
These  new  and  innovative  network  enclosures  come  complete 
with  all  the  versatile  features  you  need  to  get  custom  performance 
and  standard-design  economy  After  50  years  of  designing  and 
building  enclosures  of  all  sizes  and  types,  we  can  provide  you 
with  the  most  cost-effective,  tightly  engineered  network  packaging 
solutions  in  the  industry  For  the  complete  story,  call  for  our  new 
brochure.  After  you've  looked  over  the  long  list  of  available 
options,  you'll  find  that  Emcor's  isoNet  enclosures  have  all  the 
important  performance  features  you've  been  wishing  for. 
Shipped  in  15  days  (Instant  isoNet™  ships  in  just  five!) 


Every  Option  Imaginable  '  from  EMCOR 


Call  507-289-3371  for  a  brochure  or  visit  our  website  at  www.emcor-crenlo.com . 
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Global  Technology  Associates,  developers 
of  firewall  products  since  1 994,  proudly 
expands  the  GNAT  Box  firewall  system 
offerings  with  the  RoBoX,  a  desktop 
appliance  for  remote  and  branch  offices 
at  an  affordable  price. 


BoX 

Firewall 


•  10,000  concurrent  connections 

•  Stateful  packet  inspection 

•  Three  1 0/1 00  NICs  with  DMZ 

•  IPSec  VPN  with  mobile  user  support 

•  DNS  and  DHCP  services 

•  Dynamic  &  Static  NAT 

•  Broadband  ready  -  PPPoE  support 


Powered  by 

ICSA  certified  GNAT  Box  System 


Sales:  (800)  775-4GTA 
Tel:  (407)  380-0220 
Email:  info@gta.com 
Web:  http://www.gta.com 


“Big  Security  in  a  Small  Box 

r  Global  Technology  Associates,  Inc. 

Firewall  developers  since  1994 
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The  premiere  designer  and  manufacturer 
of  modular  ergonomic  computer  support 
furniture,  enclosures  &  cabinets. 

;  A  A--V:  ... 

Racking  Systems  •  Enclosures  •  19"  Rackmount  • 
Relay  Racks  •  Personal  Workstations  •  KVM 

2-61  Borden  Ave.  L.I.C,  NY  11101 
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Taps, 

Splitters 


Fiberoptic 

Attenuators 


Converters 
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Assemblies 


An  Important  Part  Of  The  Network 


Bypass 

Switch 


Simulation 
Test  Box 


LAN 
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Test 
Equipment 


Tdpinto 

y°ur  NETWORK 


GigaBit  Fault  Tolerant-Redundant  Security  Port  Selector 

Net  Optics'  Fiber  GigaBit  Fault  Tolerant  Port  Selector 
detects  fault  line  automatically  to  prevent 
your  network  traffic  from  stopping. 

This  product  is  a  MUST  for  ISP  centers, 
and  central  offices  with  critical  n 

data.  Works  well  with  all  GigaBit  ^0  0 

Servers,  Switches  brand  names.  1IAI _  .  _____  _  .  _  __  . , 

Network  Redundancy!  Vour  NETWORK 


visit:  www.netoptics.com/net-96260.html 


GigaBit  Copper  to  SX,  LX  or  ZX  Fiber  Converters 

Net  Optics'  Gigabit  Copper  to  Fiber  Converter  allows 
network  managers  to  migrate  to  GigaBit  Ethernet 
in  a  cost-effective  manner. 

Simply  plug-in  the  Cables. 


visit:  www.netoptics.com/sx-tx-converter.html 


GigaBit  ZX,  LX  to  SX  Media  Converter 

Net  Optics'  Fiber  Optic  Mode  Converter  is  used  to 
connect  two  devices  operating  with  GigaBit  multimode 
LX  fiber  to  SX  fiber. 

The  fiber  converter 
provides  transparent 
conversion  of  optical 
signals. 


visit:  www.netoptics.com/converter-gig.html 


Fiberoptics  Cable  Assemblies 

The  Net  Optics'  total  solutions  approach  can  provide  you 
with  any  type  of  fiberoptic  cable  assembly  you  need, 
from  LC,  MTRJ,  SC,  MIC,  FC  or  Escon  patch  cords  for 
your  ATM,  Gigabit  and  any  other  network.^^^- 
Also  available: 

LC,  SC,  MT-RJ  fiberoptic  Loopbacks. 

*-►  visit:  www. netoptics. com/2. html 


Network  Monitoring  Accessories 

In  some  countries  ISP's  must  be  TAPable...  is  the  new  Law! 


GigaBit  SX,  LX  orZX,  ATM,  DS3,  T1,  Copper  and  Fiber  Taps 

These  Splitter  Taps  have  capabilities  that  will  allow  the 
networks  to  operate  at  a  continuous  flow  while  the  tap  is 
non-operational,  thus  maintaining  network  integrity.  This 
enables  you  to  monitor  the  network  without  disconnecting 
any  one  link! 

The  Fiber  Splitter  Tap  has  passive-link  integrity  that  is 
maintained  whether  the  device  is  on  or  off. 

Copper  Gigabit  to  Fiber  Taps  feature  two  Power 
Supplies  which  are  load  sharing.  If  either  unit  fails, 
the  remaining  power  supply  comes  up  to  full  power 
and  takes  over  the  additional  load. 

Compatible  with  all  analyzer  manufacturers  including: 

Network  Associates'  Sniffer®,  Agilent's  Internet  Advisor  and 
Cisco's  SwitchProbe  products. 

’-*•  visit:  www.netoptics.com/11.html 

Net  Optics'  GigaBit  TX  to  SX  Tap  is  the  market's  first 
copper  to  fiber  tap! 


GigaBit  Fiber  Tap 


Copper  to  FX,  SX,  LX,  ZXTap 


Copper  100BaseT  Tap 


6  Station  Tap 


Troubleshoot 

NETWORK 

_  Problems 


Tap  Diagnostic 

Capabilities 


I  w  H  IQptics" 

www.netoptics.com 


Bright  ideas...  Built  for  speecf/ 

Note:  Sniffer®  is  a  registered  trademark  of  Network  Associates  Inc. 


NetOptics,  Inc.*  1230-AOId  Mountain  View-Alviso  Road*  Sunnyvale,  CA  94089-2237  •  USA  Tel: +1  (408)737-7777*  Fax: +1(408)745-7719  •  world@netoptics.com 


A  Secure  Environment 


NEWS 


WMthtr  Alert 


Train  Remotely 


Enhance  Security 


Inform  Personnel 


VBrick  Systems  can  help  protect  your  employees  and  safeguard  company 
assets.  VBricks  solutions  enhance  security  through  DVD-quality  one-way 
streaming  and  two-way  interactive  video  on  your  existing  IP  network. 
Organizations  worldwide  use  VBrick  products  for  their  versatility,  ease  ol 
use,  reliability,  and  best  of  all,  affordable  price. 


Toll  Free:  l-(866)  YERICK 1  (866-827-4251) 
Visit  our  web  site  today  at 
wuv.vbrick.com 
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•  Reboot  via  Built-in  modem,  LAN/WAN 
and  wireless  connections 


g  i.-S' 


Speclink 

To  learn  more  call  SI 4-835-1650 
or  for  instant  online  information , 
go  to  www.spectrumcontrol.com 

and  enter  SpaHkt  #k2230 


•  Lower  costs  through  reduced  network 
downtime  and  field  service  visits 

•  SMARTstart  and  SHARPstart  PDU’s  offer 
customization  and  are  upgradable 

•  Menu-driven  user  friendly  interface  and 
secure  password  protection 

•  Global  access  to  monitor,  program, 
reboot  and  sequence  outlets 
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SPECTRUM  CONTROL  INC. 

Power  Technologies  Group 

www.spectrumcontrol.com 


NetworkWorld's 


The  Hub  of  the  Hetwork  Buy 


Marketplace 


Your  network  costs  a  fortune.. 


mt 


Global  LAN  Workstations 
protect  your  equipment 
for  a  lot  less  money. 

Our  heavy-duty  LAN  Stations  are  built  to  last  with  steel-reinforced, 
triple-leg  support  and  lateral  braces.  Extra-wide  30”  work  surface, 
built-in  cable  management  system,  adjustable  shelves  and  sturdy 
server  shelf  allow  for  easy  integration  of  all  your  network  equipment. 
Our  96”,  72”,  48”  and  24”  wide  units  connect  easily  with  an  affordable 
joining  kit  for  unmatched  flexibility. 


Observer  identifies  network  trouble  spots  and  costs 
thousands  less  than  expensive  hardware-based 
analyzers.  If  you  have  any  network  problems,  find 
out  the  cause  with  Observer,  Expert  Observer  or 
Observer  Suite. 

•  Full  packet  capture  and  decode  for  over 
1000  protocols,  including  TCP/IP  (v4  and  v6), 
NetBIOS/NetBEUI,  IPX/SPX,  Appletalk, 

SNA  and  DECnet 

•  Switched  mode  sees  all  ports  on  a  switch 
gathering  statistics  from  an  entire  switch  or 
packet  capture  from  any  port(s) 

•  Long-term  network  trending  collects  statistical 
data  for  days,  weeks,  months,  even  years 

•  Optimized  ErrorTrack  NDIS  drivers  display 
true  errors-by-stations 

•  Real-Time  Statistics  include  Top  Talkers, 
Bandwidth,  Protocol  Statistics, 

Efficiency  History 


EXPERT  OBSERVER® 
OBSERVER®  SUITE 


•  Additional  probes  are  $395  per  local  or  remote 
segment/site/switch 

•  Ethernet  (10/100/1000),  Token  Ring,  FDDI 

Expert  Observer — Identifies  Problems  and 
Provides  Expert  Information  in  Plain  English 
Expert  Obsea'er  includes  all  of  the  features  of 
Observer  plus  real-time  and  post-capture  expert 
event  identification,  expert  analysis,  VoIP  expert 
and  modeling  of  network  traffic  data. 

Observer  Suite — The  Ultimate  Tool  For  The 
Most  Demanding  Power  User 

Observer  Suite  provides  a  full  complement  of  tools 
that  includes  all  of  the  features  of  Expert  Observer 
plus  SNMP  management,  RM0N  console/Probe 
and  Web  reporting.  Includes  one  remote  Probe. 


Call  800-526-7919  or  visit  us  online  for  a  full-featured  evaluation: 

www.networkinstruments.com 

US  &  Canada  (952)  932-9899  •  Fax  (952)  932-9545  •  UK  &  Europe  +44  (0)  1959  569880  •  Fax  +44  (0)  1959  569881 
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High  Performance  LAN/WAN  Troubleshooting 


&  Protocol  Analysis  Software  Solutions 


Observer — Removes  the  Mystery  of  What  is 
Being  Sent  or  Received  by  LAN  Stations 


OBSERVER 


Are  You  Gambling  With  Your 
Expensive  Data  Center  Systems? 


Dealer  Inquiries  Welcome 


1-877-427-5722 

wuw.sharkrack.com 

infoshark@sharkrack.com 


Copyright  ShaikRack.  Inc  AJI  rights  reserved  Compaq  is  a  trademark  ol  Compaq  Corp.  HP  is  a  trademark  ot  Hewlett  Packard.  Inc  IBM  rs  a  trademark  ol  International  Business  Machines.  Inc.  Sun  is  a  trademark  o I  Sun  Microsystems.  Inc..  Coco  a  a  trademark  gt  Cisco  Systems.  Inc  AM  other  trademarks  are  ere  properly  at  Vie «  lespecUve  hotdera 


You  may  be  if  you  aren’t  using  SharkRack  cabinets  and 
racking  systems.  Our  cabinets  are  made  of  the  highest 
quality  materials,  including  aluminum  extrusion  and  heavy 
gauge  steel.  We  use  heavy  duty  fans  in  our  cooling  sys¬ 
tems.  And  SharkRacks  look  great  and  are  featured  in 
some  of  the  world’s  foremost  show-case  data  centers. 
Best  of  all,  you  can  still  access  disks,  CD-ROMs,  and 
other  components  after  your  computers  are  racked. 
Give  us  a  call  today  to  see  how  we  can  help  you 
Save  Space,  Keep  Cool,  and  Look  Good. 


The  SharkRack  NetBotz  environmental  monitoring 
Our  Keyboard/Flat  Panel  sys-  appliance  will  watch  over  conditions  in  our  cabinets 

tern  takes  up  only  1  RU  in  total.  and  send  out  an  alert  to  notify  of  problems  in  advance. 


My  job  .  .  . 

find  a  compelling  way  to  improve  my  IT  skills  and  get  certified. 


OnlineExpert.com 

by  LearnKey 


I  needed  a  convenient  way  to  sharpen  my  IT  skills  and  master  certification 
objectives.  What  I  found  was  a  dynamic  e-learning  program  with  a  proven 
strategy  and  a  99%  certification  success  rate.  OnlineExpert  uses 
full-motion  video  to  bring  expert  instructors  right  to  my  desktop. 

Hands-on  labs  help  reinforce  learning  concepts  and  online 
mentors  are  there  to  keep  me  motivated  and  on  track. 

OnlineExpert  is  a  dynamic  learning  resource  for  IT  professionals  - 
I  wouldn't  be  certified  without  it. 


•  2  for  1  Online  Courses 

•  Corporate  Discounts 

•  e-learning  Deployment  Plan 

•  Try  it  FREE! 

www  learnkey  convnww 


OnlineExpert.com  -  Find  it.  Use  it.  Like  it. 


V  cH*  *  "jp’lV  Novell*  •  Cisco*  •  Lotus*  •  Adobe’  •  Linux  •  Corel’ 

1.800. 865. 01  £>5  •  onlineexpert.com 
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Learn  From 
The  Experts  “ 

Solxcv  Code  f  4046 


4.0 

Now  available! 


automate 

day-to-day 

tasks! 


"Be  forewarned ,  OpalisRobot  is  an 
addictive  tool.  Once  you 've  used  it,  you  'll 
want  to  automate  more  and  more  tasks. " 

-  Info  World 


OpalisRobot  is  a  robust  automation  solution. 
It  offers  IT  professionals  with  the  necessary 
tools  to  automate  a  broad  range  of 
administrative  tasks.  Monitor  (event  logs, 
files,  applications,  services,  processes, 
performance,  etc)  and  automate  corrective 
action.  Schedule  daily  maintenance  tasks 
such  as  running  programs,  scripts,  batchfiles, 
moving  files  and  much  more! 


♦  schedule  administrative  tasks 

♦  monitor  system  performance 

♦  automate  corrective  action 

♦  new  interface  design 

♦  new  web-based  client 

♦  new  centralized  management 

♦  new  reporting  &  notification 

www.opalisrobot.com 


1.888,Opalisl(672-547l)  tel.  +4 16.253.9383  info&opalis.com 


Remote  Network  Management  Solutions 

^ _  —  —  •  _ 

Access  Your  Network  Equipment  from  Anywhere 


western  telematic  incorporated  Keeping  the  Net.. .Working! 

5  Sterling  •  Irvine  •  California  •  92618-2517 


There  is  a  better  way 

to  secure  your 
wireless  LAN! 


□ 

□ 


www.wti.com 


(800)  854-7226 


Colubris  Networks’  CN1000  Family  of  Wireless 
LAN  Routers  with  integrated  IPSec  &  L2TP. 


colubrisnetworks.com 

keyword:  wlan  security 


Colubris  Networks* 

Securing  your  Wireless  Future  - 


AC  or  -48V  DC  Power 

RS232  Ports 


(  Console  Management  Switch  (CMS)  ) 


(  Network  Power  Switch  (NPSf) 

8  Individual  Outlets  •  Outlet-Specific  Password  Security 

On/Off/Reboot  Switching  •  Network  Security  Features 

Integral  1 0Base-T  Interface  •  1 1 5-VAC  (230-VAC  available) 
Co-Location  Features  •  Power-Up  Sequencing 


Telnet  and  Dial-Up  Console/AUX  Port  Switch 

Cost  Effective  Terminal  Server  Alternative 


8, 16  or  32  RS232  DB-9  Serial  Ports 
Simultaneous  Telnet  Sessions 
Non-Connect  Port  Buffering  -  32  K 
IP  Security  Features 

Modem  Auto-Setup  Command 
Strings  (User  Definable) 

NEBS  3  Approved 


SUN 

CONSOLE 


SONS!  IE 


CMS-16 


MOOB* 


REMOTE  AGMMSTWCR 


LOCAL  TERMINAL 


Telnet  and  Dial-Up  Network  Power  Switch 

Reboot  Locked-up  Equipment 


Individually  Controlled  Outlet  Plugs  (8) 


lOBase-T  Ethernet 
Interface 


19”  Rack  Brackets 
Allow  Front,  Back, 
or  Center  Mounting 


Dual  15  Amp 
Power  Circuits 


Modem  Port  for 
Out-of-Band  Management 


Local  RS232  Console  Port 


lOBase-T  Ethernet  Interface 


19”  Rack  Mounted 


ADAPT 


**  Your  Spot  Cooling  Specialists  ” 


800-243-COOL 

FREE  Cooling  Analysis  Guido  ONLINE! 

vnvw.coolestspot.com 


**iahjf ahead  and  protect  your  IT  operations 
r'roni  heat  crippling  downtime. 

■  -  ;A'vv  •'  *•  / 

Thousands  of  COOLITs  are 
currently  cooling  data/LAN 

flV 

rooms  around  the  clock. 


AirPac  COOLITiooo 

Plug  and  cool. 


Portable. 

Compact. 


Self-Contained. 


w 

WAY/OOCOOL 


l^mK^marri 

you  can  find  them. 

* 


LinkSmart,  located  on  \ 
Network  World  Fusion,  \ 
allows  you  to  search  for  V 
products  and  services  by  \ 
technology.  Vendor  listings  \ 
appear  with  a  product/service 
description  and  include  a 
link  to  each  vendor's  website, 
Solutions  in  one  convenient  site, 
www.nwfusion.com/linksmart 


Instant  e-mail  access  anytime,  anywhere. 


PDA  or  other  device  to  carry. 

.  Works  with  your  SMTP  e-mail  or  Microsoft  Exchange. 

no  changes  to  your  e-mail  system  or  PBX. 

•  'No  monthly  service  charges. 

800-843-1317  www.mailspeech.com  icmrrnrrrn 


GoCables  now  offers  a  complete  line  of  high 
speed  Ethernet  solutions,  from  Fast  Ethernet 
Hubs  to  Cable  Routers.  To  help  you  get 
connected  we'll  throw  in  a  free  patch  cord  with 
every  networking  hardware  product  you  purchase 
at  www.gocables.com. 

Great  Values  -  Great  Quality  -  Great  Warranty 

GoCables  offers  a  3  year  exchange  program 
for  any  defective  product. 


More  Networking  Hardware 

PCMCIA  LAN  Adapters 

IP  Routers  Switching  Hubs 

Print  Servers  Fast  Ethernet  Hubs 
Gigabit  Switch  Fast  Ethernet  Cards 


The  Hub  of  the  Hetwork  Buy 


NetworkWorld's 


Marketplace 


Successful  teamwork. . . 

gets  you  to  ,i 

market  faster. 


www.sbs.com 


Let  SBS  be  your  preferred  partner.  Leverage  SBS'  proven  technology,  innova¬ 
tive  products  and  dedicated  support  to  create  fully  integrated  standard  and  custom 
OEM  solutions  for  a  variety  of  communication  networking  applica¬ 
tions. Team  with  SBS  to  speed  up  time  to  market,  optimize  scarce 
engineering  resources  and  meet  price/performance  requirements. 


For  more  information,  contact  SBS  at  (888)  SBS-COMM. 


SBS 

Technologies 

embedded  computing  preferred. . . 


California  •  Massachusetts  •  Minnesota 
New  Mexico  •  North  Carolina  •  Wisconsin  •  Germany 

All  logos  A  trademarks  are  property  of  their  respective  owners. 
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Authorized  Reseller 

Buy  Sell  Lease  Repair 

New  Refurbished  Used 

Nortel 
Memory 


Routers 

Switches 

Hubs 


DSU/CSUs 

3Com 


ISDN 


1  800  553  0592 


PRODUCTS 


www.wdpi.com 


Cisco  Systems 


Email:  cisco6@wdpi.com 


Reseller 


Server  Management 
Made  Simple 


Your  environment  may  be  complex, 
but  its  management  does  not  have  to  be. 

Internet  standards  exist  today  for  secure 
and  reliable  network,  system,  and 
application  management.  One  company 
continues  to  be  the  leader  in 
standards-based  management  software. 

SNMP  Research  International 

www.snmp.com 
+1  865  579  3311 

The  Internet  Management  Experts 


RACK  MOUNT  TFT  DISPLAYS 

We  provide  the  solutions  for  your  rack  mount  display 
requirements  with  our  innovative  TFT  product  line. 


KEYBOARD,  TOUCHPAD  AND  TRACKBALL  OPTIONS 
1 U,  2U  AND  PANEL  MOUNTED  CONFIGURATIONS 
12.1”,  13.3”,  15”  AND  17”  TFT  DISPLAY  SIZES 

fi 

Contact  us  for  more  information. 

www.recortec.com  1-800-729-7654  info@recortec  .com  I 

„  I 

K?  Proudly  manufactured  In  the  U.S. A.  by  Wt 

RECORTEC,  INC.  j 

1620-A  Berryessa  Road  San  Jose,  Ca  95133  Tel:  (408)  928-1480  Fax:(408)729-3661  j 


The  Hub  of  the  Network  Buy 


DEVICE  •  NETWORK  •  SECURITY 
APPLICATION  •  MONITORING 


interloci 

network  management 


www.intefkxa.ccim 


Increase  Your  Exposure  with 
NetworkWorld’s  Response  Card  Decks! 

Issue  Date:  January  18,  2002 
Ad  Close:  December  4 

With  bonus  distribution  at  ComNet  in  Washington,  DC 

Call  your  sales  rep  to  get  details. 

800.622.1108 


16  remotely  addressable  power  outlets  — 
The  highest  density  available  of  any 
Remote  Power  Management  vertical  strip. 
30-amp  power  Input  feed  distributed 
across  16  outlets. 

Mounts  vertically  In  your  equipment  rack  or 
cabinet  and  requires  Zero  U  of  radc  space. 
Load  Sense  provides  real  time  current 
monitoring  in  the  remote  screen  interface 
and  through  a  built-in  LED  display  for  on¬ 
site  measurement. 

Power-up  sequencing  of  all  16  outlets 
prevents  an  In-rush  current  overload. 
Telnet.  SNMP,  Modem  or  RS-232  interfaces  for  easy, 
practical  and  secure  power  management  of  remote 
internetworking  equipment 


2001  Sr  Wlsdvralcir.  he .  Sentry  Is  a  trademark  ot  Server  technology,  Inc. 


H  Sentry  POWER  tower  :  Your  Zero  U  Reboot  Solution 


1 


Install  the  new  Sentry  Power  Tower  in 
your  data  center,  NOC  or  co-lo  facility 
and  gain  the  advantage  of  remotely 
rebooting  up  to  16  of  your  equipment 
units  -  without  occupying  any  space  in 
your  rack  or  enclosed  cabinet 

Try  the  New  Sentry  Power  Tower  in  your 
rack  or  cabinet  and  realize  the  benefits 
of  Intelligent  Power  Distribution  and 
Remote  Power  Management 


See  our  complete  product  line  at  wwwservertech.com 
or  call  800835.1515  or  775^84.2000 


minimize  rack  space  required, 
maximize  server  rack  efficiency! 


Mini  Max  the  KVM  Switch  with  built  in 
Monitor,  Keyboard  and  Mouse  all  in  1U! 


Fits  all 

Cabinet 

Depths 


15”  TFT  HQ 
Flat  Screen 


Hot  Key,  OSD, 
Panel  Select 


All  Metal 
Construction 


83  Keys  with 

Keypad 


x  Comfort  Type 
Wrist  Rest 


Touch  Pad  Mouse 


■*? 


onnect-Tek 

since  1989 


Sales  Assistance:  (718)  729-3700 

Visit  our  Online  Store  at:  WWW.COnneCt-tek.COIH 

email:  sales@connect-tek.com 

Connect-Tek,  Inc.  39-24  24th  St.,  L.I.C.  NY  11101  •  Fax  (718)  729-3972 


sysums 
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We  BUY/SELL  New  &  Used  LAN/WAN 
Connectivity  Products 

Specializing  in  CISCO 


YU  Systems.  Inc. 

•500  Crbv  Way,  Suite  D 
Roaeviiie,  CA  95676 

i&\  8)  784-3000 

lav  <916)  797' .’284 

ctTia-  UV.1 


Overnight 

delivery  available 


Authorized 
Cisco  Reseller 


Monitor 
PC  Users 

See  multiple 
computer  screens  in 
real  time  with  the 
award-winning 
NetOp  Remote 
Control. 


The  Cabinet  SourceiU' 

_  www.premiermetal.com  m 


Buy  I 
Online  * 

Your  Best  Cabinet 

Resource  Center 

■  Best  Selection  -  server, 
datacomm.  wall-mounted 
cabinets,  relay  racks 

■  Best  Delivery  -many 
models  shipped  from  stocl 

■  Best  Pricing 

•  Best  Web  Site  -  easy 
selection,  drawings  &  spec 


www.CrossTecCorp.com 


Premier  Metal  Products  Company 


NetworkWorld’s 


The  Hub  of  the  Network  Buy 


Marketplace 


IMMEDIATE  AVAILABILITY 


Netfast  Communications  Inc.,  56-29  56th  Drive,  Maspeth,  NY  1 1378  USA 
Phone:  1  -888-892-4726  or  718-894-7500  Fax:  718-894- 1 573 

Network.  World  -  5/200  1 


Save  big  on  new/used:  ►  Routers  ►  Gigabit/FE/ATM  Switches 
►Access  Servers  > Optical  Networking  >-Wireless  BUY/SELL/RENT 


■  CISCO  ►  Juniper 


www.  digitalwarehouse.  com 

DIGITAL  WAREHOUSE 

Your  Information  Superhighway  Discount  Sources 


►  Lucent  ►  Nortel 

►  Foundry 

►  Extreme 


►  Marconi 

►  Adtran 

►  Quick  Eagle 


Network  Products  and  Services 
with  Network  World's  Marketplace. 
Call  800-622-1108  ext.  6507 


Yff  View  Cart  Clear  Cart 


/Ifiberdvne  labs 

Fiber  Optic  R 
Networking  Products 


FACTORY  DIRECT 
FIBER  OPTIC  PRODUCTS 


Jumpers,  Pigtails,  Termination  Boxes, 
Preconnectorized  Backbone  Cable, 
Mode  Conditioning  Cables, 
Ethernet  Converters  and  Switches, 
CATS  Products,  Photonic  Devices 

www.fiberdyne.com 

A  FIBERDYNE  LABS,  INC. 

l-(800)  894-9694 
(315)  895-8470 
Fax  (315)  895-8436 


Solve  Your  Network 
Sync  Problems 
with  Wireless  CDMA 


"•  •oc*  —  — 

NTP  Time  Server 

•  High  Performance 

•  Low  Cost 

•  Easiest  Installation  — 

No  antenna  hassle! 

EndRun 

TECHNOLOGIES 

www.endruntechnologies.com 

1-877-749-3878 


HI 

CISCO 

New  &  Used 

■ 

Fully  Guaranteed 
Overnight  Delivery 

■  ■■ 

800.451.3407 

Routers 
Switches 
Interface  Modules 

-°  Castilian  Dnve  Suile  110.  Santa  Barbara.  CA  93117 

Access  Servers 
Accessories 

www.networkhardware.com 

BUY  ONLINE 


NETWORK  HARDWARE  RESALE 


Get  More  for  Today's  Budget! 

Contact  BIZI 
to  SAVE  up  to  80% 

•  50-80%  Savings  off  Retail  List  Prices 

•  120-Day  Warranty 

•  100%  30  Day-Money  Back  Guarantee 

•  Large  Inventory,  Same  day  Shipping 

•  Supplying  Quality  Networking  Products 
for  Over  10  Years  with  In-House  Technical  Support 

Request  a  Quote  on-line  at: 

http://www.bizint.com  or  info@bizint.com 

(877)  438-2494 

or  (315)  458-9606  fax:  (315)  458-9493 


We  Buy,  Sell,  Trade  and  Lease... 


Your  global  partners  In  new  &  quality 
pre-owned  networking  equipment 


CISCO,  BAY/NORTEL,  3COM,  CABLETRON,  EXTREME,  FORE/MARCONI 


■.ED  7D  Bu  y 

Networking 
Products 
and  Services 


Over  170,000  qualified 
subscribers  of  Network 
World  are  ready  to  buy. 

Call  today  to  place  your 
ad  in  the  Marketplace! 
1-800-622-1108 
ext.  6465 


l." 
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Cable  University 

(800)  537-8254 
www.Cablell.net 

FREE  online  training  in  network 
cabling  installation  &  maintenance 


NetworkTraining.com 

(800)  NET-SK1L 
(800)  638-7545 

Network  Analysis  &  Tool  Training 
Certified  NetAnalyst  Testing 

BNETSYS  Inc. 

(800)  BNETSYS 
www.bnetsys.com 
Instructor  led  &  online  Cisco 
certification  training  @  no  charge 


To  Place  Your 
Listing  Here 
Call  Enku  Gubaie 
at  1-800-622-1108 


j  Contact  these  companies 
■  today  to  help  you  with  your 
training  needs! 


For  more  information  on 
advertising  in  the  Marketplace. 


STOP 


omything,  and  cal^pfw! 

80(K&£2^Q&*4xt.6465 


For  more  information 
on  advertising  in 
Network  World’s 
Marketplace  contact: 

Enku  Gubaie, 

800-622-1108  ext.  6465, 
egubaie@nww.com 


WRCA.NET 

NEW  USED 

■VcxUwd*  ProwJw  of  N.lwcxl  uru»1M< 

AUTHORIZED  RESELLER 
Access/Routers/Switches 
Cisco  Livingston  Ascend 
3Com  US  Robotics  Kentrox 
Adtran  BayNetworks  Xyplex 
Computone  Digital  Link 
Modems  /  DSU  /  Muxes 
IBM  UDS  Codex  Hayes  GDC 
Micom  Microcom  Paradyne 
ATT  MultiTech  Penril 
Racal  Telebit  Zoom 

WE  BUY  AND  SELL 
www.wrca.net 
800-699-9722 


N&RTEL  NETWORKS 


Why  Are  We  The  Best? 


•  Nortel  Service  Contracts  •  Free  Technical  Support 

•  Nortel  Service  Renewals  •  Next-Day  Hardware 

Replacement 

•  Good  As  New  Gear, 

Same  as  New  Warranty 
-  at  Better  Than  New  Prices 

Refurbished  Specials: 

ASN/2-32mb  Refurbished  Advanced  Stack  Node  Bundle 

Indudes  AF0002E13-32mb  Redundant  Base  Unit 
lx  34000  Dual  Ethernet  lx  AF21 11005  Quad  Sync 
lx  AA0011004  Fast  Packet  Cache,  lx  AF2104013  128  bit  Compression  Module 

Special  $2,995 

BayStack  350T-HD  (AL2012E10)  24  Port  10/100  switch 

Refurbished  Grades  may  vary.  “A*  Grade  sale  price  $350.00 

One  Year  Warranty 

As  Low  As  $150 

BayStack  450-24T  (AL2012E14)  24  Port  10/100  Stackable 

Special  $895 

Backbone  Router  Special-AG  1004005 

Refurb  kit  indudes  Dual  1008T  with  the  Fast  FRE2-060-64mb 

Special  $3,249  | 

_ 

Dontwant  used?  Try  our  low  prices  on  new!  Call  Today! 

Call  for  Free  Quote! 

888-8LANWAN 

(888-852-6926)  " 

National  LAN  Exchange  •  WWW.nle.com 
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IT  CAREERS 
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careers 


OUR  PEOPLE  MAKE  THE 

Difference 


WAL* MART  Stores,  Inc. 


Vvptb  Looking  for  the  Future  Leaders  of  Tomorrow 


Wal-Mart  Stores,  Inc.  has  been 
recognized  by  Fortune  Magazine 
as  one  of  the  most  admired 
companies  in  the  world.  As  our 
company  continues  to  expand, 
so  does  the  opportunity  for 
first-class,  talented  people  to 
guide  the  future  of  one  of  the  most 
successful  and  innovative 
growth  companies  in  the  world. 

Put  your  career  on  a  fast  climb  and 
help  us  continue  to  set  the  industry 
standard  in  information  technology. 

•  UNIX  -  C,C++,  Administration, 
Engineering,  Informix  DBAs 

•  NT  Workstation  -  VB,VC++, 
Java,  ASP,  XML 

•  IBM  Mainframe  -  COBOL, 
C1CS,  DB2  and 
IMS  DBAs 

•  Networking  -  Ethernet,  VSAT, 
Frame  Relay,  ATM 

•  Telecommunications 


Ready  to  do  it  all?  Candidates 
interested  in  joining  our  team, 
should  forward  a  resume  to: 

Wal-Mart  Information  Systems 
Division;  Attn.  Recruiting 
Department;  805  Moberly  Lane 
M41;Bentonville,  AR  72716-0560; 
Fax:  (501)277-4227; 

Email:  mawinbe@wal-mart.com 

For  more  information,  call 
toll-free:  1-888-JOBS-ISD 
or  visit  our  website  at 
www. walmartstores.com 


Wal-Mart  Is  An 

Equal  Opportunity  Employer.  M/F/D/V 
2000  Wal-Mart  Stores,  Inc. 


Senior  Lead  Test  Analyst.  Denver, 
CO.  Eval  &  test  s/ware  prgms  to 
determine  compatibility  w/existing 
systm,  ease  of  use,  validity  of 
results,  accuracy,  reliability,  con¬ 
formance  to  estab  stds,  &  if 
s/ware  meets  user  reqmts.  Write, 
revise  &  verify  test  procedures 
for  prgm  dsgn  &  product  eval  to 
attain  qlty  of  s/ware  economically 
&  efficiently.  Observe  prgm  during 
test  to  detect  error  codes  or 
interruption  of  prgm  &  corrects 
errors.  Identify  differences  betwn 
estab  stds  &  user  applies  & 
suggest  modifications  to  conform 
to  stds.  Write  documentation 
to  describe  prgm  eval,  testing 
&  correction.  Envrmnt:  Segue 
S/ware  Silk  test,  Silk  Performer, 
Rational  S/ware  Test  Studio  & 
Requisite  Pro.  Bach  of  Sci/Arts- 
(or  foreign  deg  equiv)+1  1/2  yrs 
exp.  40  hr/wk.  $40K/yr.  Mail 
resume  to  CO  Dept  of  Labor  & 
Employment,  Attn:  Jim  Shimada, 
Tower2,  Ste400, 1515  Arapahoe 
St.  Denver,  CO  80202-2117,  ref 
to  JO#  C05007889. 


- ♦ - 

Software  Engr  wanted  by  an  IT 
services  provider  Co.  located  in 
San  Jose,  CA.  Must  have  BS  in 
CS  or  any  field  of  enggr.  or  its 
foreign  equivalent  with  2yrs  exp. 
s/ware  devlp.  life  cycle.  Mail 
resume  to  HR.  ASMAsoft,  Inc., 
90  N  First  St.,  Ste  203.  San  Jose 
CA  95113. 


10* 

”  Kama  Consulting  Inc. 
TOP  SS  's,  W2  or  1099 

We  are  a  fast  growing 
Consulting  company  based 
in  New  Jersey. 

Excellent  opportunities  for 
Programmers, 

Systems  Analysts,  DBAs. 

Sun  Solaris  System  Admins, 
Natural,  Powerbuilder, 
ADABAS,  ORACLE,  SYBASE, 
PROGRESS,  COBOL 
TCP/IP.  Delphi/VB,  Windows  NT 

Send  your  resume  to 

Rod  McFadden 

Kama  Consulting 
Fax:201-934-7166 
Email:Kamaco@aol.com 

SENIOR  SOFTWARE  ENGI- 

NEER-Wanted  by  Software  De¬ 
velopment  Company.  Require¬ 
ments  include  Bachelor's  Degree 

in  Computer  Science  or  related 

field  or  equivalent  with  5  yrs 

of  experience.  Travel  required. 

Please  respond  to  Robyn  Bello, 

HR  Representative,  IONA  Tech¬ 
nologies,  200  West  Street, 

Waltham,  MA  02451. 

Manager,  Systems  wanted.  Must 

have  Bachelor's  degree  or  equiv¬ 
alent  in  Comp.  Sci.,  Eng.  or 
related  lield  &  3  yrs.  systems  & 

database  administration  exper., 

incl.  networking  &  programming 

experience  in  VisualBasic,  C++, 

Perl  &  Shell  scripting  languages. 

Send  resumes  to  Barbara 

Catchings,  Human  Resources, 

Boston  Medical  Center,  One 

Boston  Place,  Room  D-2, 

Boston,  MA02118. 

Senior  Programmer  (Latin  Amer¬ 
ican  Projects)  -  design,  develop, 
analyze  and  test  custom  modifi¬ 
cations  to  law  firm  acctg  software 
for  Latin  American  Implementa¬ 
tion;  Visual  FoxPro,  SQL,  Crystal 
Reports,  Novell,  Windows,  QA 
skills,  fluency  in  Spanish,  and 
ability  to  interact  with  Latin 

American  clients.  Must  have  BS 

in  Comp  Sci/Engg  or  equiv  &  1 
yr  exp.  Respond  to:  HR  Dept, 
ASA  Legal  Systems,  475  Sentry 
Parkway,  Blue  Bell,  PA  19422. 

Advisory  Development  Engineer 
sought  by  company  in  Louisville, 
CO  specializing  as  a  provider  of 
network  computing  storage  to 
work  in  Louisville  &  other  unan¬ 
ticipated  job  sites  in  the  US. 
Design  &  integrate  Storage  Area 
Networks  (SAN)  for  product 
design.  Determine  customer 
configurations  for  SAN's  for 
prospective  clients  &  provide 
product  marketing  support  from 
a  technical  support  standpoint. 
Use  Fiber  Channel  &  SCSI  stan¬ 
dards,  backup  &  management 
software  applications,  &  multiple 
operating  systems  (including 
Windows  NT,  Solaris,  HPUX,  & 
AIX)  to  develop  SAN  components, 
including  hub  switches,  routers, 
&  host  bus  adapters.  Use  RAID 
systems  &  subsystems  (redun¬ 
dant  array  of  independent  disks) 
to  determine  algorithms  to  be 
implemented  in  storage  disks. 
Provide  trouble  shooting  for 
customers  &  in-house  product 
development  staff.  Requires  4 
yrs.  as  a  Software  Engineer  in 
network  development.  Working 
knowledge  of  Windows  NT, 
Solaris,  HPUX,  RAID,  &  tape 
backup  systems.  8am-5pm,  M-F; 
$1 00,049/yr.  Respond  by  resume 
to  James  Shimada,  Colorado 
Department  of  Labor  &  Employ¬ 
ment,  Employment  &  Training 
Division,  Tower  II, #400, 1515 
Arapahoe,  Denver,  CO  80202,  & 
refer  to  Job  Order  Number 
C05007481. 


- ♦ - 

OBJECT  TECHNOLOGY  CON- 
SULTANT-Wanted  by  Software 
Development  Company.  Require¬ 
ments  include  Bachelor’s  De¬ 
gree  in  Computer  Science  or 
related  field  or  equivalent  with 
2  yrs  of  experience.  Travel  re¬ 
quired.  Please  respond  to  Robyn 
Bello,  HR  Representative,  IONA 
Technologies,  200  West  Street, 
Waltham,  MA  02451 . 


SENIOR  DESIGNER  DEVEL- 
OPER-Wanted  by  Software 
Development  Company.  Re¬ 
quirements  include  Bachelor’s 
Degree  in  Computer  Science 
or  related  field  or  equivalent  with 
5  yrs  of  experience.  Travel  re¬ 
quired.  Please  respond  to  Robyn 
Bello,  HR  Representative,  IONA 
Technologies,  200  West  Street, 
Waltham,  MA  02451. 


Database  Administrator-IS/IT 
Prof.  Consltng  Svcs  Co.  in 
Piscataway,  NJ.  Bachelors 
degree  in  Comp.  Sc.,  Engg.  and 
5  yrs.  of  post  graduation  exp. 
reqd.  Respond  by  resume  to: 
(Ref.  #GG7762),  Subex  Tech¬ 
nologies.  Inc.,  255  Old  New 
Brunswick  Road,  S240,  Piscat¬ 
away,  NJ  08854.  (no  phone 
calls). 


Software  Engineer  (Louisville, 
CO):  Research,  design,  develop, 
implement,  test  and  maintain 
object  oriented  image-guided 
navigational  computer  software 
in  a  UNIX  environment,  including 
Graphical  User  Interfaces.  Work 
on-site  with  physicians  and  other 
healthcare  professionals  to  de¬ 
velop  functional  requirements  for 
software  to  provide  surgeons 
with  capability  to  plan,  navigate 
and  precisely  position  surgical 
instruments  and  devices  during 
medical  procedures  involving  the 
brain,  spine,  heart  and  other 
human  anatomy.  Must  work  in 
medical  environment  with  expo¬ 
sure  to  live  human  anatomy  and 
participate  in  software  testing  on 
animals. 

Must  have  a  least  a  Bachelor's 
degree  or  foreign  degree  equiv¬ 
alent  in  Computer  Science, 
Engineering  or  related  field. 
Must  also  have  1  year  experi¬ 
ence  in  job  offered  OR  1  year 
experience  in  a  position  involv¬ 
ing  Object  Oriented  software 
development.  Experience  may 
be  obtained  concurrently  and 
must  include:  (i)  1  year  experience 
in  designing  Graphical  User 
Interfaces;  (ii)  1  year  experience 
in  developing  software  in  a  UNIX 
environment;  and  (iii)  1  year 
experience  in  medical  technology 
software  development.  Must  have 
legal  authority  to  work  in  the 
United  States.  Send  resume  to: 
M.  Light  (RFE:SE),  Medtronic 
SNT,  Coal  Creek  Corporate 
Center  One,  826  Coal  Creek 
Circle,  Louisville,  CO  80027. 


♦ 


Sales  Engineer  wanted  by  an  IT 
services  provider  Co.  located  in 
San  Jose,  CA.  Must  have  BS  in 
any  field  of  enggr.  or  its  foreign 
equivalent  and  a  Masters  deg. 
in  marketing  with  3  yrs  exp  in 
marketing/market  development. 
Mail  resume  to  H.R.,  ASMAsoft, 
Inc.,  90  N.  First  St.,  Ste.  203,  San 
Jose,  CA95113. 


♦ 


Sr.  Software  Engineer  for  NJ 
based  Co  for  client  locations  in 
the  USA.  Must  have  Master's 
degree  in  Comp.  Sc.,  Engg., 
proficiency  in  RDBMS,  C/C++, 
EJB,  Broadvision  and  Weblogic 
and  two  years  of  experience  in 
Comp.  S/W  developing  and/or 
consulting.  Respond  to:  HR 
Dept.,  Y-Point,  Inc.,  1  Bethany 
Road,  Suite  58,  Building  4, 
Hazlet,  NJ  07730.  (Ref:  7971 IM). 


SENIOR  OBJECT  TECHNOLO¬ 
GY  CONSULTANT-Wanted  by 
Software  Development  Company. 
Requirements  include  Bachelor’s 
Degree  in  Computer  Science  or 
related  field  or  equivalent  with 
5  yrs  of  experience.  Travel  re¬ 
quired.  Please  respond  to  Robyn 
Bello,  HR  Representative,  IONA 
Technologies.  200  West  Street, 
Waltham,  MA  02451. 


An  importer  8  wholesaler  for 
jewelry,  located  in  Los  Angeles. 
California,  has  multiple  openings 
for  system  analysts.  The  position 
requires  a  minimum  of  a  bachelor's 
degree  or  equivalent  in  computer 
science  or  electrical  engineenng 
and  two  years  experience  as 
a  systems  analyst,  computer 
engineer,  electrical  engineer,  or 
electronics  engineer.  Send  re¬ 
sume:  Siddiqui  Company,  Inc.. 
Attention:  Human  Resources. 
650  South  Hill  St..  Ste.  224,  Los 
Angeles,  CA  90014. 


- ♦ - 

Junior  Programmer.  Determine 
needs,  write  programs  &  debug 
under  supervision.  Provide  client 
assistance  in  using  software. 
Req:  Bachelors  in  Comp.  Sci., 
Comp  Eng. .Business  Admin 
with  courses  in  computing. 
40-hr.wk  Job/Interview  Site: 
Santa  Monica,  CA  Please  send 
resume  to  Accruent,  P.O.BOX 
52,  Santa  Monica,  CA  90406- 
0052. 


Project  Mgr.  sought  by 
elevator  mfgr  to  devl,  imple¬ 
ment,  manage  worldwide 
Enterprise  Resources  Plan¬ 
ning  Systems.  Must  have 
Bachelors  in  Comp.  Sci.  or 
equiv  +  4  yrs.  exp.  in  job 
or  related  exp.  as  IT  Con¬ 
sultant.  Respond  to  H.R., 
#CM,  Otis  Elevator  Co.,  10 
Farm  Springs,  Farmington, 
CT  06032.  EOE. 


Programmer  Analyst:  Analyze, 
design  and  perform  technical 
analysiss  &  enhance  systems 
capabilities  using  Visual  Basic, 
ASP  (HTML  &  VB  Script), 
RDBMS  on  Windows  NT/95 
environment.  Determine  the 
pertinent  requirement  of  the 
system  applications.  M.S.  Degree 
in  Compu.  Science/Engg.  or  B.S. 
Degree  in  Compu.Science/Engg. 
with  5  years  of  progressive  ex¬ 
perience  as  an  IT  Professional. 
Sal.  72K  +  Medical  benefits. 
Resume  to:  Human  Resources, 
Acorn  Technology  Group,  Inc., 
28  Bloomfield  Avenue,  Pine 
Brook,  NJ  07058 


♦ 


Software  Consulting  Company 
seeks  Systems  Analyst  Bachelor 
degr.  in  comp  sci,  math  or  in  any 
eng.  field  plus  1  yr  of  exp  as  a 
Systems  Analyst,  Programmer 
Analyst  or  Database  Analyst. 
Send  resume  to  HR  Dept.  Prithvi 
Solutions,  214  South  Craig  St. 
#5,  Pittsburg,  PA  15213. 
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The  World 
Of  Work  Is 
Changing 
Every  Week. 


Luckily,  We 
Are  Too! 


For  the  most  up  to 
date  opportunities 
and  coverage,  stay 
tuned  in  with  us. 

ITcareers 

where  the  best  get  better 

1-800-762-2977 


Pr  Analyst  (Oakbrook,  IL)  Plan, 
develop,  &  test  business  applic 
programs,  evaluate  user  requests, 
analyze  &  develop  specifications 
&  programs,  review  &  alter  pro¬ 
grams,  monitor  performance, 
perform  conversion.  40  hrs/wk, 
9a-5p,  $70,250/yr.  BS  in  Comp 
Sci  &  1  yr  exp  req'd.  Exp  must 
incl  Cobol,  CICS,  Assembler, 
DB2,  IMS  DB-DC,  IBM  main¬ 
frame,  Expeditor.  Applicts  must 
show  proof  of  legal  authority  to 
work  in  US.  Resume  to:  IL  Dept, 
of  Empl  Security,  401  South 
State  St.  7-North,  Chicago,  IL 
60605,  Attn:  L.  Jackson.  Ref 
#V-IL  241 68-J.  An  employer  paid 
ad.  NO  CALLS  -  Send  2  copies 
of  both  resume  &  cover  letter. 


MILLIONS  OF 
READERS 


MILLIONS  OF 
SURFERS 

ONLY 
THOUSANDS 
OF  DOLLARS 

TOTAL  IMPACT 
TOTAL 
SAVINGS 


Put  your  message  in 
IT  careers  and 
ITcareers.com  and 
reach  the  world’s 
best  IT  talent. 


ITcareers 

whore  the  host  got  hettor 
1 -800-762-2877 


National  Instruments  Corp  is  a 
fast  growing  Hi-tech  Co  based 
in  Austin,  TX  and  is  currently 
seeking  to  fill  multiple  positions 
in  the  following: 

Software  Engineers 
Research,  dsgn  &  dvlp  s/ware  in 
mainly  C/C++  using  OO  dsgn  & 
s/ware  dsgn  principles.  Must 
have  Bachelors  in  Engg,  or 
Comp  Sci  or  Physics  or  Math. 
CODE:  ZSW 

Applications  Engineers 
Develop  applications  for  products, 
systems  and  new  business 
opportunities.  Provide  technical 
support  for  software  products 
and  their  applications  to  cus¬ 
tomers,  sales  engineers,  and 
distributors.  Resolve  technical 
issues  using  an  understanding 
of  electronics  and  software 
programming  fundamentals.  Must 
have  Bachelor's  in  Engineering 
or  Computer  Science,  or  Physics 
or  Math.  CODE:  ZAE 

Computer  Hardware  Design 
Engineers 

Research,  dvlp  &  manage  pro¬ 
jects  in  data  acquisition,  signal 
conditioning,  industrial  commu¬ 
nication,  instrument  Ctrl,  image 
acquisition,  embedded  controllers 
&  ASIC  prdcts  using  dsgn  tech¬ 
niques  in  analog  &  digital  circuit 
dsgn,  comp  architecture,  com¬ 
munication  bus  interfacing  & 
digital  signal  processing.  Must 
have  Bachelors  in  Engg,  Comp 
Sci,  or  Physics  or  Math.  CODE: 
ZHE 

Programmer/Analysts  (Business 
Processes) 

Plan,  analyze,  dsgn,  dvlp  &  test 
s/ware  using  Oracle,  Lotus  Notes, 
Web;  use  GUI  &  object-oriented 
dsgn  to  dvlp  user  interfaces  & 
data  entry  screens  that  support 
business  functions.  Bach  in  Info 
Sys  or  Comp  Sci  or  Business 
Admin.  CODE:  ZPA 

Staff  Programmer/Analysts 
Evaluating  applications  develop¬ 
ment  projects,  leading  a  team  of 
Programmer  analysts/interns; 
planning,  analyzing,  dsgng, 
dvlpng  &  testing  s/ware  using 
Oracle  &  Lotus  Notes;  using  GUI 
&  object-oriented  dsgn  to  dvlp 
user  interfaces  &  data  entry 
screens.  Bach,  needed  and  2 
years  as  Programmer/Analyst. 
CODE:  SPA 

Fax  resumes  to:  Raja  Faris, 
National  Instruments  Corp  at 
512-683-6924.  Job  Code  must 
appear  on  resume. 


Systems  Analyst.  Analyze  and 
design  complex  computer  systems 
and  application  programs  to 
meet  customer  needs;  direct; 
assist,  and  review  the  work  of 
development  team  members; 
and  assign  team  members  to 
projects.  Must  have  Bachelor’s 
degree  in  Computer  Science, 
Engineering  or  related,  and 
knowledge  of  C,  UNIX,  SQL, 
Java,  Oracle,  and  HTML.  Send 
resume  with  cover  letter  to  APAC 
Customer  Services,  Inc.,  Attn: 
Cindy  Corkery,  6  Parkway  North 
Center,  Deerfield,  IL  60015. 
EEO/AA 

APAC  CUSTOMER  SERVICES, 
INC.  is  not  affiliated  with  APAC, 
Inc.,  the  road  paving  and 
construction  materials  company. 


♦ 


Computer/Info  Systems 

The  Foster  Group,  Inc.,  seeks 
experienced  Systems  Engineers 
to  design  and  implement  large 
scale  network  systems  and 
execute  systems  integration 
projects.  Must  develop  and  test 
multi-platform  disaster  recovery 
plans  using  LDRPS/Rexsys; 
re-engineer  business  processes; 
and  implement  Total  Quality 
programs.  Multiple  openings.  Job 
in  Chicago  area.  Competitive 
salary.  Send  resumes  to  HRD, 
The  Foster  Group,  Inc.,  180  N. 
Michigan  Avenue.  Ste  2000, 
Chicago,  IL  60601.  Fax  312- 
609-1109. 


Your  ideas,  dreams, 
and  creativity  make 
you  uniquely  you. 

That's  why  at  Kanbay,  we've  created  an 
environment  that  encourages  original  thinking. 
We're  an  IT  consulting  firm  accelerating  legacv-to- 
web  technology  worldwide.  We're  one-of-a-kina.  Just 
like  you  are.  Imagine  what  we  could  accomplish 
working  together.  The  following  opportunities  are 
based  at  our  corporate  headquarters  in  Chicago 
and  locations  nationwide: 

•  Candidates  with  technical  skills  in: 

JAVA,  J2EE,  XML,  OOA,  OOD, 
WebSphere,  WebLogic,  Visual  Age  for 
JAVA  and  MQ  Series 

•  Project  Managers 

•  Technical  Architects 

•  Technical  Leads 

•  Senior  Web  Developer 

•  Programmers/ Analysts 

We  offer  an  excellent  benefits  package,  including 
company  paid  full  coverage  for  health,  dental,  and 
vision,  company  contributed  401 K  and  tuition 
reimbursement.  For  consideration,  forward  response 

to:  Kanbay,  Inc.,  6400  Shafer  Ct.,  Ste.  100, 
Rosemont,  IL  60018.  Fax:  847-318-0784. 

E-mail:  rstewart@kanbay.com.  Please  reference  code 
CW01 10201  in  all  correspondence.  EOE. 


Kanbay 

www.kanbay.com 


r. 


Analyst/Project  Programmer: 
Provide  design,  development, 
implementation  and  maintenance 
support  for  World-Wide-Web 
(WWW)  database  applications 
for  biological  and  medical  scien¬ 
tific  research.  Involves  WEB 
content  development,  database 
design  and  implementation,  CGI 
and  JAVA  application  design  and 
implementation  and  application 
interfacing  with  databases  (OR¬ 
ACLE).  Work  with  the  Director 
and  project  scientists  to  create 
WWW  applications  to  conduct 
data  collection,  validation  and 
analysis  to  directly  support  and 
conduct  the  research  project. 
Development  of  projects  in  both 
UNIX  (SUN  Solaris)  and  PC 
(Win  95  and  NT)  systems. 
Required:  Mater's  degree  in 
Statistics,  Mathematics,  or  Com¬ 
putational  Chemistry.  $42,000/ 
year;  40  hrs.  week,  8:00  a.m.  - 
5:00  p.m.  Two  copies  of  resume 
to:  MIKE  BROOKS;  DWE-FLC; 
P.O.  Box  7972.  Madison,  Wl 
53707-7972.  Reference  file 
#0101923. 


Info  Tech  Co.  seeks  a  principle 
consultant  to  perform/consult 
w/client  regarding  customizat'n/ 
implementat'n  of  iManage 
Products,  Authentica  RECEALL, 
CompuLaw  Vis'n,  Interface 
Interact'n,  Spicer  Imaginat'n,  & 
Eastman  Imag'g;  design,  program/ 
manage  &  technical  support  for 
internet/intranet  websites;  web 
page  dvlpmnt;  integration  of 
iManage  w/AutoCad;  custom 
applicat'n  dvlpmnt.  Bachelor's 
or  equiv.  in  Eng'g/Computer 
Science.  Min  2  yrs  in-job  or 
job-related  exp  includ'g  use  of 
SQL  7.0  IIS  4/5,  SSL  &  AutoCad. 
Travel  Required.  Employer  will 
pay  travel  costs.  Send  resumes 
to:  Smart  Solutions,  Attn: 
Dale  Mesnick,  4925  Galaxy. 
Warrensville  Hts.,  OH  44128. 


Visual  Basic  Programmer/ 
Analyst:  Develop  Visual  Basic 
MIS  software.  Responsible  for 
full  cycle  projects  involved  in 
client/sever  architecture  &  design, 
standards,  selection  &  customiza¬ 
tion,  tiered  platform  operating 
system  selection,  graphical  user 
interface  selection  &  design,  & 
application  program  selection. 
Collaborate  with  five  programmers 
&  external  consultants.  Will  use 
Visual  Basic,  MS  Access, 
ActiveX  controls,  &  MS  SQL 
server. 40  hr  work  week, 
9am-5pm.  Pay:  $59, 000/year. 
Requires  Bachelor  degree  in 
Comp.  Sci.  EE  or  Math  &  1  year 
experience  in  either  in  job 
offered  or  as  Programmer, 
Programmer/Analyst,  Systems/ 
Analyst  or  related.  Other  require¬ 
ments  include:  Experience  to 
include  design  &  development 
of  MIS  software  using:  Visual 
Basic,  MS  Access,  ActiveX 
controls,  &  MS  SQL  Server. 
Applicants  must  show  proof 
of  legal  authority  to  work  in 
the  U.S.  NO  CALLS-SEND  2 
COPIES  OF  BOTH  RESUMES 
&  COVER  LETTER  to  Illinois 
Department  Of  Employment 
Security,  401  S.  State  St.,  7 
North,  Chicago,  IL  60605. 
Attn:  Leonard  Boska,  Reference 
#V-IL  29583-B.  AN  EMPLOYER 
PAID  AD. 


CDI  Information  Technology 
Services  has  multiple  openings 
for  computer  consultants,  pro¬ 
grammer/system  analysts,  soft¬ 
ware/project  engineers.  Candidate 
must  have  Bachelor's  degree. 
IT  experience  preferred.  Traveling 
IS  required  for  some  positions. 
Please  send  resumes  to  River 
Bank  Plaza  740  N  Plankinton 
Avenue  Suite  700,  Milwaukee, 
Wl  53203;  1915  Hwy. 52  N..  Ste. 
222B,  Rochester,  MN  55901  or 
1900  E.  Golf  Road,  Suite  L10, 
Schaumburg,  IL  60173.  EOE 
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Amdocs,  a  leading  developer  ol 
software  solutions  for  the 
telecommunications  industry  is 
seeking  team  players  with  strong 
technical  S  personal  skills  for  the 
following  positions  at  our 
Chesterfield,  MO  location,: 

Project  Directors: 

-to  direct  development  center 
for  telecomm  software  systems 
&  installation.  Reqd:  6  yrs.  exp. 
as  Proj.  Dir.  or  in  Database  Tech¬ 
nology  Mgmt.  Must  have  exp.  w/ 
large  scale  database  technology 
management  and  exp.  w/ 
telecomm  projects. 

Sr.  Project  Managers: 

-to  direct  conversion  and  imple¬ 
mentation  of  telecomm  software 
systems  at  client  sites.  Req'd.: 
Bach.  Deg.  in  Comp.  Sci..  Eng’g., 
Math  or  related  discipline  and  4 
yrs  exp  as  Project  Mgr.  or  Sys¬ 
tems  Analyst.  Must  have  exp. 
w/Primavera  Project  Planner. 
SureTrak  or  similar  project 
mgmt  Software.  Must  have  exp 
w/telecomm  projects. 

Systems  Analysts: 

-to  analyze  existing  telecomm 
systems  to  evaluate  effectiveness. 
Req'd.:  Bach.  Deg.  in  Comp.  Sci., 
Math.  Eng'g.  or  related  discipline 
and  1  yr  exp.  as  Systems  Analyst. 
Must  have  exp.  w/COBOL,  C  and 
DCL  which  may  be  acquired 
through  education  or  employment. 
Must  have  telecomm  project  exp. 

-to  design,  develop  &  implement 
applications  &  system  multiar¬ 
chitecture.  Req'd.:  Bach.  Deg.  in 
Comp.  Sci.,  Math,  Eng’g.  or  a 
related  discipline  &  2  yrs.  exp.  as 
Systems  Analyst  or  Program¬ 
mer.  Must  have  exp.  in  C,  C++, 
COBOL  &  SQL.  Must  have  exp. 
w/telecomm  projects. 

-to  design,  code,  test  &  maintain 
applications  for  telecomm  billing 
systems.  Req'd.:  Bach.  Deg.  in 
Comp.  Sci.,  Math,  Acctg.,  Eng'g 
or  a  related  discipline  and  two 
yrs.  exp.  in  systems  analysis  or 
programming.  Must  have  exp. 
w/PowerBuilder,  SQL+  &  Oracle. 

-to  develop  new  telecomm  soft¬ 
ware  systems  to  improve  pro¬ 
duction  or  workflow.  Req'd.: 
Bach.  In  Comp.  Sci.,  Math,  Eng'g 
or  related  discipline.  Must  have 
exp.  w/COBOL  &  SQL  which 
may  be  acquired  through  em¬ 
ployment  or  education.  Must 
have  exp.  w/telecomm  projects. 

Candidates  for  all  positions  must 
be  willing  to  temporarily  relocate 
to  client  sites  throughout  the  U.S. 

Send  resume  to: 

Amdocs,  Inc. 

Att:  Amy  Skalski 
1 390  Timberlake  Manor  Pkwy. 

Box  STL  19 

Chesterfield,  MO  63017 
Fax:314-212-7510 
jobs@amdocs.com 


COMPUTER  PROFESSIONALS 

Opportunities  for: 

•WEB  ARCHITECTS/ 
DEVELOPERS 

•  SYSTEMS  ANALYSTS 

•  WEB  GRAPHIC  DESIGNERS 

•  NETWORK  ENGINEERS 

•  PROGRAMMER/ANALYSTS 
•SOFTWARE  ENGINEERS 

SKILLS: 

•  COLD  FUSION  •  SPECTRA 

•  ORACLE  •  VISUAL  BASIC 

•  VISUAL  C++  •  SIEBEL  •  ASP 

•  COM,  DCOM  •  JSP  •  HTML 

•  JAVA,  JAVA  BEAN  •  EJB  JAVA 
SERVLETS  •  WEBSPHERE 

•  IBM  MQ  SERIES  •  XML,  UML 

•  MTS  •  CLARIFY  •  PERL 
•OBJECTPERL  •  SPYPERL 

•  SMALLTALK  •  PL/SQL 

•  VISUAL  AGE  •  COBOL,  SPL, 
UNIX 

Visit  our  website  @ 
www  computerhorizons.com 

Attractive  salaries  and  benefits 
Please  forward  your  resume  to: 
H  R.  Mgr ,  Computer  Horizons 
Corp.  49  Old  Bloomfield  Avenue, 
Mountain  Lakes,  New  Jersey 
07046-1495  Call  973-299-4000. 
E -mail :  )0t)S  @  computertKinzons 
com  An  Equal  Opportunity  Em¬ 
ployer  M/F 


LODESTAR  Corporation  is  a  fast 
growing  applications  software 
development  company  working 
with  100  Blue  Chip  Energy  com¬ 
panies.  We  are  currently  seeking 
the  following: 

Senior  Software  Engineers 
&  Database  Administrators/ 
Design  Analysts 

Requirements:  Master's  degree 
(or  equiv.)  in  CS.  math,  or  related 
technical/engineering  field  and  3 
years  of  relevant  industry  expe¬ 
rience  OR  Bachelor's  (or  equiv) 
in  same  fields  and  5  years  rele¬ 
vant  experience.  Experience  must 
be  progressive  but  may  be  gained 
before  or  after  earning  degree(s) 

Software  Engineers 

Requirements:  Bachelor’s  degree 
(or  equiv)  in  CS  or  closely  related 
field. 

Associate  Project  Managers 
(SW  Development! 

Requirements:  Bachelor's  degree 
(or  equiv)  in  Industrial  or  Process 
Engineering  or  closely  related 
field  and  2  years  relevant  expe¬ 
rience. 

To  be  considered,  qualified  can¬ 
didates  should  apply  by  e-mail, 
mail  or  fax  to: 

Human  Resources  &  Recruiting 
Manager.  LODESTAR  Corpora¬ 
tion,  Two  Corporation  Way, 
Peabody,  MA  01960.  (F)  978-573- 
4800.  jobs@lodestarcorp.com 


Sr.  Systems  Analyst 

Interact  with  clients  to  determine 
their  computer  requirements. 
Devise  symbolic  formulations, 
prepare  flow  charts  and  block 
diagrams,  conduct  program 
specification,  review  data 
handling  systems  to  evaluate 
effectiveness  and  to  improve 
electronic  data  processing. 
Provide  project  management, 
system  study  and  analysis, 
schema  definition  and  database 
design,  unit/integration  testing, 
application  fine  tuning  and 
performance  tuning,  implemen¬ 
tation,  user  training,  maintenance, 
customer  support.  Write  technical, 
functional  user  documents  and 
manuals  relative  to  the  operational 
systems.  Conduct  software  testing 
and  maintenance,  analyses  of 
databases  and  reports,  trend 
plotting  and  graphics.  Must  have 
MS  degree  in  CS  and  be  able  to 
use  MS  Visual  Basic  6.0,  MS 
SQL,  MS  Access  97,  and  Crystal 
Reports. 

40.0  hrs./wk  8:30  AM -5:00  PM 
$70,000/Yr 

Applicants  send  cover  letter 
and  resume  to: 

M.  Fronczak 
Specialty  Underwriters 
9667  South  20th  Street 
Oak  Creek,  Wl  531 54-4946 
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SOFTWARE  ENGINEERS  (10 
positions):  require  Bachelor’s  in 
Engineering/Computer  Science/ 
Mathematics/Science  or  closely 
related  major  with  two  years 
experience  providing  skills  in 
described  duties,  at  $70,000  per 
year;  Senior  Software  Engineers 
(8  positions)  with  Master's 
and  two  years  experience,  at 
$75,000  per  year.  Provide  on-site 
consulting  in  design,  analysis, 
analysis  and  development  of 
software  application  in  Oracle, 
DB2,  SQL  Server  and  Sybase; 
e-commerce  and  web  applica¬ 
tions  development  in  Microsoft, 
Java  and  related  technologies; 
network  management  systems 
development  with  Netscape 
Server  and  related  tools;  SAP 
R/3  applications  on  Windows 
with  DOS  and  ABAP/4  and 
related  modules.  40%  travel  to 
client  sites  in  the  United  States. 
Mail  resumes  to:  YASH  Tech¬ 
nologies,  Inc.,  2100  Parklake 
Drive,  NE,  Suite  F,  Atlanta,  GA 
30345-2167. 


QUALITY  ASSURANCE  ENGI¬ 
NEER  to  plain  and  direct  devel¬ 
opment,  application  and  mainte¬ 
nance  of  quality  standards  for 
complex,  multi-platform  software 
products  for  the  complete  product 
life  cycle;  develop  test  specifica¬ 
tions  and  plans;  develop, 
implement  and  oversee  software 
defect  prevention  program 
according  to  recognized  ISO 
9001  quality  standards;  design, 
implement  and  maintain  testing 
software  using  automated 
software  testing  tools  operating 
in  UNIX  OS  and  Windows 
OS.  Require:  B.S.  in  Computer 
Science/Electrical  Engineering 
and  two  years  experience  in  the 
described  job  duties.  Competitive 
salary  and  benefits.  Mail  resume 
to:  H.R.  Coordinator,  Chutney 
Technologies,  Inc.,  34900  Pied¬ 
mont  Road,  Suite  1100,  Atlanta, 
GA  30305. 


SOFTWARE  ENGINEERS 
TIBURON  NETWORKS,  INC., 

a  small  Boston-area  company 
engaged  in  sophisticated  solutions 
for  the  optical-powered  Internet, 
seeks  to  fill  Software  Engineering 
positions.  Required  is  a  Bache¬ 
lor’s  degree  in  a  relevant  field 
(some  positions  require  a  Master's 
degree),  and  between  3-5  years 
relevant  experience.  Specifically: 

•  Senior  Principal  Software 
Engineer /Technical  Lead 
(Forwarding  Data  Path); 

•  Senior  Software  Engineer 
(Routing  Systems); 

Starting  salary  from  $90,000  - 
$140,000, 18  days  annual  earned 
time  off,  medical  insurance,  and 
other  industry  competitive  benefits. 
Respond  with  resume  only 
to:  Ms.  Judith  Hinkle,  Tiburon 
Networks,  Inc.,  Dept.  IMSP,  200 
Minuteman  Road,  Andover,  MA 
01810. 

Email:  IMSP@tiburonnet.com 
Fax:  (978)  933-8030  An  EOE. 


Engineer-Sr.  Firmware  Engineer- 
design  RTOS-based, real-time 
embedded  system  firmware  & 
define  system  architecture  for 
electromechanical  embedded 
system  firmware.  Must  have 
Bachelor's  degree  in  Computer 
Science,  Physics,  or  Engineering 
plus  5  yrs  experience  or  Masters 
degree  in  Computer  Science, 
Physics  or  Engineering  plus  3 
yrs  experience.  Fax  resumes  to: 
408-383-0322. 


Systems  Consultant-IS/IT  Prof. 
Consltng  Svcs  Co.  in  Piscataway, 
NJ.  Bachelors  degree  in  Comp. 
Sc.,  Engg.,  Bus.  Admin,  and  1 
yr.  of  exp.  reqd.  Respond  by 
resume  to:  (Ref.  #GG7848), 
Subex  Technologies,  Inc.,  255 
Old  New  Brunswick  Road,  S240, 
Piscataway,  NJ  08854.  (no  phone 
calls). 


Sr.  Software  Engineer,  Application 
wanted  by  a  Health  Care  Infor¬ 
mation  Bureau  in  Miramar,  FL. 
MD  in  Computer  Science.  Plan, 
schedules,  &  directs  preparation 
of  programs  to  process  data  & 
solve  problems.  Analyzes  test 
runs  on  computer  to  correct  or 
direct  correction  of  coded  program 
&  input  data.  Supervised  outgoing 
integration/configuring  of  new 
systems.  Respond  to:  Diane 
Vento,  HR  Dept,  HealthNet 
Data  Link,  Inc.,  31 06  Commerce 
Parkway,  #100,  Miramar,  FL 
33025. 


Software  Engineers  needed 
by  NJ  based  IT  firm.  Will 
need  Masters  plus  exp. 
Please  apply  with  2  copies 
of  your  resume  to  H.R. 
Dept.,Techdemocracy,  LLC 
1426  Cheryl  Drive,  Iselin, 
NJ  08830. 


Internet  Development  Engineer: 
design  and  develop  database- 
driven  Internet  web  applications. 
Must  have  minimum  Bachelor's 
in  Computer  Science  or  foreign 
equivalent,  one  year  experience 
(lab  or  employment)  in  Java 
technologies,  HTML  and  Internet 
protocols,  and  Internet  security, 
and  present  proof  of  legal  au¬ 
thority  for  full-time  employment 
in  the  US.  M-F,  8:30AM-5:30PM, 
$38,000/yr.  Those  interested  and 
qualified,  send  resume  or  apply 
in  person  to  GA  Dept,  of  Labor 
Job  Order  GA  7032000,  1 535 
Atkinson  Rd.  Lawrenceville,  GA 
30043  or  nearest  GA  DOL  Field 
Service  Office. 


"Programmer  Analyst:  Create, 
implement  and  manage  website; 
Coordinate  staff  to  interface  with 
the  website's  needs  and  require¬ 
ments;  Analyze,  review  and  alter 
programs  to  increase  operating 
efficiency  or  adapt  to  new  require¬ 
ments;  Develop  programs  for  usi- 
ness  applications  and  design 
projects  for  internet  marketing; 
Provide  technical  support;  Ability 
to  work  with  JAVA.  HTML  /  XML, 
CGI,  SQL.  Proficiency  in  Web 
Application  Server  Administration; 
Fulltime  position  in  Miami,  Florida; 
Competitive  salary;  Applicants 
with  2  years  experience  in  the 
job  send  resume  only  to  Wilhelm 
Roedenbeck,  Texinter,  Inc.  7701 
SW  62  Avenue,  Miami,  Florida 
33143." 


Application  Programmer  for 
Woonsocket,  Rl  to  design,  de¬ 
velop  and  maintain  large  client- 
server  based  applications  using 
Microsoft  development.  Min  req. 
B.S.  degree,  6  months  exp.  Qual¬ 
ified  applicants  send  CV  to  171 
St.  Augustine  St.,  Woonsocket, 
Rl  02895.  No  calls. 


Project  Mgmt  Analyst  (Atlanta, 
GA):  Manage,  coordinate  & 
analyze  activities  re  info. Tech,  & 
internet-based  projects.  Determine 
project  costs,  requirements,  etc. 
Requires:  2  yrs.  exp.  in  job  of¬ 
fered  or  2  years  exp.  as  a  mgmt 
execut.  or  a  related  position  with 
same  duties  and  "Bachelors  in 
Business  Admin  or  a  related 
field.  *  Will  accept  bachelor’s  in 
a  combination  of  college  level 
education  and  experience.  Exp. 
ref.  required.  Salary:  $68,000/ 
yr.  EOE.  Send  resume  to:  Int'l 
Object  Tech,  Inc.,  67  Walnut 
Avenue,  Suite  308,  Clark,  NJ 
07066. 


Build/Release 
Support  Engineer 

Under  close  suprvisn  of  Build 
Rel  Engr  support  Dvpmnt,  QA,  & 
Prod  Mgmnt  in  dev,  implem, 
maintnce  of  robust  Build  &  Rel 
procs  &  tech  thru/out  SW  proj. 
lifecycle  for  OSS  prods  on  multple 
plats,  mult  OS's  &  app  srvr  en- 
vrnmnts.  Contribs  to  S/W  Build  & 
Rel  proc  by  integrating  chged 
SW  source,  prgrming  executable 
SW,  &  preparing  it  for  installation 
into  test  &  prod  envrnmnts  for 
mult  plats  &  app  srvr  envrnmnts. 
Serve  as  team  mbr  &  assist  with 
streamlining  &  automating  thru 
continuous  process  imprvmnt 
efforts.  BA/BS  in  CS/CE  or 
closely  related  field. 

Lotus  Notes  Developer 

Design,  develop  &  maintain  Lotus 
Notes  based  apps.  Proj  Mgr  lor 
internal  intrastructure  ClearQuest 
dev  &  admin  Must  have  2-3  yrs 
exp  in  a  Notes/Domino  envrmnt, 
MS  SQL  7.0,  Visual  Basic, 
HTML,  ClearQuest.  ClearCase 
&  Unix  progmmng  BA/BS  CS. 
MA/MS  in  CS  pref.  Email  to 
hr@edocs.com.  Edocs  is  EEO. 


Software  Data  Engineer-prepare, 
maintain  &  support  comprehen¬ 
sive  data  models  &  business 
programs  using  SQL  SAP  BW 
and  data  warehousing  for  product 
applications.  Must  have  Bachelor's 
degree  in  comp  sci,  physics  or 
engineering  +  5  yrs  exp  in  job 
or  Master's  degree  in  computer 
science,  physics  or  engineering. 
Pis  fax  resume:  MECA  Recruiting 
(201)  392-6007. 


COMPONENT  DESIGNER- 
Wanted  by  Software  Develop¬ 
ment  Company.  Requirements 
include  Bachelor’s  Degree  in 
Computer  Science  or  related 
field  or  equivalent  with  2  yrs 
of  experience.  Travel  required. 
Please  respond  to  Robyn  Bello, 
HR  Representative,  IONA  Tech¬ 
nologies,  200  West  Street, 
Waltham,  MA  02451 . 


Systems  Analyst  for  NJ  based 
Co.  Multiple  Openings,  for  client 
locations  in  the  USA.  Must  have 
Master's  degree  in  Comp.  Sc., 
Engg.,  and  two  years  of  experi¬ 
ence  in  Comp.  S/W  developing 
and/or  consulting.  Respond 
to:  HR  Dept.,  Akshay  Software 
International,  Inc.,  2025  South 
Lincoln  Highway.  Ste.  207,  Edison, 
NJ  0881 7.  (Ref:  7938IM). 


Operations  Manager  Develops/ 
maintains  mgmt.  info,  systems 
$  security/communications  pro¬ 
tocols;  develops  and  links 
through  Internet  manufacturing/ 
inventory  controls/fulfillment/ 
distribution/sales/reporting 
systems;  develops  procedures 
for  customer  service;  re-engi¬ 
neers  info,  processes;  trains  em¬ 
ployees.  Req.  MS  in  ind.  eng  or 
closely  rel./equiv.  &  2  yrs.  exp 
in  job  offered  or  in  database 
administration.  Resume  to  Brava, 
LLC.,  2601  S.  Bayshore  Drive, 
Suite  725,  Coconut  Grove.  FL 
33133. 


netNumina.  a  premiere  systems 
integrator  and  consultancy,  is 
searching  for  Software  and  QA 
Engineers  to  develop  and  deploy 
internet  based  e-business 
applications.  Multiple  locations. 
Please  submit  resume  via  email 
to  hr@netnumina.com. 


Talent  is 
the  fuel  of 
the  new 
economy. 

Fill  up 
with 

ITcareers. 


fT careers  and 
IT  careers.com 
can  put  your 
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of  2/3  of  all  US 
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into  our  pages. 
Call  Janis 
Crowley  at 
1-800-762-2977 


ITcareers 

when  the  best 
get  better 


MWims  s 


Computerworld  •  InfoWorld  •  Network  World  •  November  12,  2001 


IT  CAREERS 


Advertising  Supplement 


IT  Careers  in  Security 


In  today's  heightened  awareness  of  security, 
information  technology  is  more  important  than 
ever.  Conservative  estimates  place  the  total  market 
for  IT  security  -  authentication,  authorization  and 
security  administration  -  at  $8  billion  within  the 
next  three  years. 

Eagle  Alliance,  a  joint  venture  of  Computer 
Sciences  Corporation  and  Northrop  Grumman,  sup¬ 
ports  the  National  Security  Agency.  Bill  Duveneck, 
director  of  information  systems  security  for 
Eagle  Alliance,  says  the  alliance  project,  known  as 
Groundbreaker,  addresses  data  availability,  integrity, 
authenticity,  confidentiality  and  non-repudiation. 
"The  United  States'  response  to  the  tragedy  of  Sept. 
1 1  put  a  spotlight  on  the  importance  of  our  client's 
mission  and  made  absolutely  clear  Groundbreaker's 
mission,"  Duveneck  explains. 

"Hands-on  and  analytical  skills  will  be  needed 
in  areas  associated  with  operational  network  and 
system  monitoring  and  problem  resolution," 


Duveneck  says.  He  looks  for  experience  in  networks, 
desktops,  enclave  protection,  operations  and  knowl¬ 
edge  of  the  various  governmental  policies  that  cover 
information  assurance.  Eagle  Alliance  has  mid-  and 
senior-level  positions  available,  as  well  as  entry 
level.  "We're  initiating  and  building  something  brand 
new,"  Duveneck  adds.  "What  makes  us  an  employer 
of  choice  is  the  important  work  we're  doing." 

At  Secure  Computing,  Mary  Ann  Stoffels,  vice 
president  of  human  resources,  says  demand  for 
products  and  services  that  ensure  safe,  secure 
extranets  for  e-business  has  heightened  in  the 
past  few  weeks.  Secure  Computing,  with  $39  million 
in  2000  revenues,  offers  career  options  in  three 
development  divisions  -  Advanced  Technology, 
Network  Security  and  Enterprise  Security,  as  well  as 
traditional  roles  in  sales,  marketing  and  operations. 
"Because  of  our  size,  each  person  has  the  opportuni¬ 
ty  to  be  a  leader  and  be  recognized  for  the 
contribution  you  make,"  Stoffels  says. 

The  company  looks  for  A-level  players  with 
industry  experience,  a  track  record  for  delivering 
results  and  who  have  the  high-energy  profile 
demanded  by  the  market.  "We  work  hard,  but  we 
also  invest  in  ongoing  learning.  Our  company  is 
known  for  doing  the  basics  and  doing  them  well," 
she  adds. 


State  Farm  Insurance,  based  in  Bloomington,  IL, 
values  the  ability  to  anticipate  security  risks.  "We 
were  already  on  a  path  of  increased  awareness  prior 
to  Sept.  11,"  explain  Jeff  Stempora  and  Bob  Hillmer, 
directors  of  enterprise  information  security  and 
directory  services.  "We  have  double-checked  our 
capability,  but  we've  also  questioned  ourselves  on 
how  aware  we've  made  our  people  and  how  we 
have  honed  our  ability  to  respond." 

Stempora  and  Hillmer  look  for  advanced  network 
security  experience  when  hiring.  "There  are  lots  of 
new  questions  -  new  devices  and  new  systems  -  with 
new  answers  yet  to  be  found,"  says  Stempora.  "Just 
as  important  as  the  broad  technical  experience  are 
the  soft  skills  required  to  increase  effective  security 
through  communication,  collaboration  and  a  toler¬ 
ance  for  ambiguity.  We  must  be  able  to  take  action, 
even  when  we  don't  have  all  the  answers  yet." 

Adds  Hillmer,  "State  Farm  is  a  great  place 
to  work.  Our  slogan  is  'like  a  good  neighbor'  -  we 
live  that." 

For  more  job  opportunities  with  security  firms,  turn  to  the  poges 
of  ITcareers. 

•  If  you'd  like  to  take  part  in  an  upcoming  ITcareers  feature,  contact 
Janis  Crowley,  650.312.0607  or  jonis_crowley@itcareers.net. 
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Few  companies  see  the  full  scope  of 
the  contribution  IT  can  make  to  their 
business.  Firemans  Fund,  a  leading 
insurance  company,  will  actively 
empower  you  to  make  that  difference. 
Our  Shared  Services  infrastructure 
positions  you  to  make  decisions  with  a 
tangible  impact  on  the  profitability  of 
technological  solutions.  We’ll  give  you 
the  accountability  you  crave  and 
inspire  you  to  make  the  most  of  it  - 
with  lucid  guiding  principles, 
energized  co-workers,  and  exceptional 
rewards.  With  your  commitment,  and 
that  of  our  global  parent,  Allianz  AG, 
there’s  nothing  we  can’t  accomplish. 


Lead  Systems  Engineer 

Novato,  CA 


www.firemansfund.com/careers/ita9.html 

Provide  broad  technical  support  for  the  development  and  enhancement  of  service 
applications  and  the  Message  Bus  infrastructure  that  supports  those  services. 

You  will  collaborate  and  consult  with  application  teams  on  the  overall  conceptual 
integration  design,  standards  and  rules,  as  well  as  participate  in  project  design  reviews. 

You  should  possess  expertise  in  Java/VisualAge,  XML,  Websphere,  UDB/DB2,  UNIX/AIX,  and 
UML/Rational  Rose  along  with  skills  in  OO  analysis  and  design.  Knowledge  of  the  MQ  Series, 
IBM's  IAA  BOM/XML,  COBOL,  IMS/CICS  would  be  a  plus. 


Systems  Engineer  Specialist 

Novato,  CA 

www.firemansfund.com/careers/ita12.html 


Provide  high-level  technical  leadership  and  mentoring  for  a  team  of  Systems  Engineers 
while  working  closely  with  management  to  define  system  improvements  and  deployment 
strategies.  Your  technical  responsibilities  will  include  enhancement  and  maintenance  of  the 
Message  Bus,  the  Report  Ordering  Interface,  and  additional  enterprise  applications  as  they  are 
identified.  As  new  initiatives  are  approved,  you  will  take  an  active  part  in  the  design,  development 
and  deployment  efforts.  You  should  possess  in-depth  knowledge  of  OO  analysis  and  design, 
Java/VisualAge,  Websphere,  UNIX/AIX ,  UDB/DB2,  UML/Rational  Rose,  Servlets,  MQ  Series,  JSP,  and 
EJBs  as  well  as  IBM's  IAA  BOM/XML.  Six  years'  experience  is  required  in  full  life  cycle  development 
including  estimating  and  planning.  We  prefer  2+  years'  experience  in  web  architectures. 


Employees  enjoy  innovative  benefits  including  professional  development 
opportunities,  paid  leave  accounts,  a  matching  401  (k)  program  and  retirement 
benefits.  Firemans  Fund  is  an  Equal  Opportunity  Employer,  M/F/D/V. 
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NET2S  is  a  leading  International 
Consulting  and  Engineering  firm 
specializing  in  networking  and 
communications  technologies. 
We  are  presently  seeking  to  fill 
the  following  positions: 


•  Sr.  Unix  Administrator 


•TIBCO  Engineer 

•  Network  Security  Specialist 
•Telecom.  Engineer 

•  Sr.  Software  Engineer/ 
Developer 

All  positions  require  BS/MS 
degree  with  a  minimum  of  2  to  3 
years  of  experience  in  the  field. 
Must  possess  excellent  commu¬ 
nication  skills  as  well. 


NET2S,  82  Wall  Street  Suite  400, 
New  York,  NY  10005;  Fax:  (212) 
279- 1 960;  Phone  (21 2)  279-6565; 
or  Email:  iobus-nv  @ net2s.com 
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News 


Putting  MPLS  to  work 


Service  provider  Westelcom  uses  Multi-protocol  Label  Switching  (MPLS)  to  prioritize  traffic 
over  its  voice/data  network. 
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Voice  and  data  traffic  from  businesses  and 
residences  is  labeled  by  an  MPLS  access 
device  at  a  Westelcom  collocation  site. 
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The  traffic  flows  over  paths  through  the 
network  (including  Verizon's  leased-line 
network),  as  specified  by  the  MPLS  labels. 
The  labels  also  prioritize  and  ensure 
evaluation  of  service  for  the  voice  traffic. 
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An  MPLS  access  device  at  the 
Westelcom  point  of  presence  removes 
the  labels  and  shunts  data  to  the 
Internet  through  a  router,  and  voice 
to  the  public  switched  telephone 
network  through  a  Class  5  switch. 
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MPLS 

continued  from  page  7 

“It’s  a  little  bit  more  than  [traffic 
engineering]  because  it  allows  us 
to  overlay  multiple  logical  topolo¬ 
gies  on  the  same  infrastructure” 
of  backbone  trunks  and  label 
switch  routers,  says  Rick  Wilder, 
principal  scientist  at  Masergy 

MPLS  lets  Masergy  overlay  a 
separate  mesh  network  on  top  of 
its  Internet  sendee  infrastructure 
to  deliver  the  private  point-to- 
point  link  service,  Wilder  says. 
MPLS  labels  let  the  carrier  differ¬ 
entiate  traffic  (and  service),  grant 
it  different  levels  of  priority,  and 
steer  it  onto  different  paths  —  vir¬ 
tually  creating  a  new  network 
using  the  same  equipment  and 
infrastructure. 

“There  are  big  gains  there  in 
terms  of  cost  of  the  actual  equip¬ 
ment  and  bandwidth,  but  also  in 
terms  of  complexity  and  manage¬ 
ment  of  all  the  devices,”  he  says. 

“If  you  have  the  ability  to  do 
those  overlays  using  the  same 
pieces  of  equipment,  you’ve  got 
that  much  less  to  configure  and 
manage,”  he  adds. 

Wilder  says  MPLS  traffic  engi¬ 
neering  is  going  to  be  important 
to  Masergy  and  other  carriers 
looking  to  offer  a  new  generation 
of  flexible  services. 

“It’s  what  enables  us  to  have  the 
range  of  service  offerings  that  we 
can  roll  out,”  he  says. 


Local  convergence  on  MPLS 

On  a  smaller  scale,  Westelcom, 
an  upstate  New  York  competitive 
local  exchange  carrier,  is  serving 
15  sites  with  MPLS-based  inte¬ 
grated  voice/data  access  ser¬ 
vices.  Westelcom  is  focused  on 
small-and  midsize-business  cus¬ 
tomers,  and  average  deploy¬ 
ments  are  six  to  eight  voice  lines, 
plus  best-effort  asymmetric  DSL 
data  services. 


In  addition  to  providing  traffic 
engineering  and  QoS  for  voice, 
MPLS  enables  Westelcom  to  re¬ 
duce  cost,  simplify  its  network 
design  and  operations,  and  re¬ 
duce  the  amount  of  equipment 
it  requires  in  its  central  office 
and  collocation  sites,  says  Eric 
Kreckel,  corporate  engineer  at 
the  carrier. 

Using  MPLS  access  devices 
from  Integral  Access  saves  Wes¬ 


telcom  from  purchasing  separate 
DSL,  time-division  multiplexer 
and  ATM  aggregation  gear  and 
routers,  Kreckel  says. 

“[Traffic  engineering]  was  one 
of  the  factors  in  the  decision¬ 
making  process”  to  implement 
MPLS,  Kreckel  says. 

“The  service  also  had  to  be 
affordable. We  had  to  differentiate 
it  from  our  competitors,  be  a  little 
bit  more  flexible  and  give  [cus¬ 
tomers]  different  options  than 
other  people  could,”  he  adds. 

In  the  Westelcom  network,  voice 
is  digitized  and  packetized  using 
the  ITU  G.711  standard,  Kreckel 
says.  MPLS  takes  the  G.711  data 
frame  and  prepends  a  “small” 
MPLS  label  on  it,  which  makes  the 
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packet  size  78K  bytes,  instead  of 
the  80K  to  100K  bytes  of  a  voice- 
over-IP  packet  with  real-time,  real¬ 
time  control  and  point-to-point 
protocol  headers,  he  says. 

“A  [voice-over-IP]  packet  has  a 
heavy  packet  tax  on  it  after  you 
add  those  headers,”  Kreckel  says, 
referring  to  the  increased  pro¬ 
cessing  overhead  and  segmenta¬ 
tion  framing,  and  associated  de¬ 
lay  with  the  larger  packets. 

The  MPLS  label  also  signifies 
that  the  voice  packet  has  the 
highest  bandwidth  priority  and 
steers  it  through  the  network  ac¬ 
cordingly,  Kreckel  says. 

“It  also  does  all  the  other 
things  that  QoS  requires,  such  as 
segmentation  and  prioritization 
of  the  other  traffic  flows  going 
across  the  system,”  he  says. 

MPLS  let  Westelcom  tap  its  ex¬ 
pertise  in  IP  routing  and  Inter¬ 
net  service  provisioning  with¬ 
out  having  to  retrain  people  in 
ATM,  which  is  renowned  for  its 
traffic  engineering  and  QoS 
characteristics.  But  MPLS  lets 
Westelcom  avoid  ATM  without 
sacrificing  a  lot  in  the  way  of 
QoS,  Kreckel  says. 

“Really  what  it  came  down  to  is 
[MPLS]  could  do  everything  that 
we  wanted,  plus  it  came  in  at  a 
much  more  competitive  price 
point  for  doing  that,  as  opposed 
to  an  ATM-style  system,”  Kreckel 
says.’Tm  not  going  to  go  so  far  as 
to  say  you’re  going  to  get  every¬ 
thing  that  you  get  with  ATM  . . .  but 
we  get  what  we  need  out  of  it.” 

Next  week:  A  look  at  MPLS- 
enabled  VPNs. 
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Microsoft 

continued  from  page  7 

“The  industry  has  been  talking  about  [full  disclo¬ 
sure]  for  10  years.  Now  it’s  time  to  come  up  with  a 
solution  for  the  industry,”  Culp  said. 

Security  flaws  that  are  tearing  at  the  company’s 
strategic  plans  fuel  cynicism  toward  Microsoft’s 
motives. 

The  hole  discovered  in  Passport  last  week  was  a 
major  blow  to  Microsoft’s  .Net  initiative,  which  lays 
out  an  interconnected  computing  environment  that 
runs  over  the  Internet.  Microsoft  must  convince  IT 
executives  it  has  a  secure  platform  before  .Net  can 
take  off,  and  Microsoft  is  touting  Passport  as  .Net’s 
universal  authentication  mechanism. 

“Passport  scares  me  to  no  end, "says  Robert  Dennis, 
network  administrator  for  an  apparel  manufacturer. 
“The  recent  vulnerability  has  retarded  our  devel¬ 
opment  of  .Net  until  there  are  security  initiatives  in 
place  with  Microsoft  that  show  our  intellectual  prop¬ 
erty  will  not  be  at  risk.” 

Microsoft  is  working  on  those  initiatives.  Last 
month,  in  response  to  the  Code  Red  and  Nimda 
worms  it  launched  its  Strategic  Technology  Pro- 
tection  Program.  The  program  is  designed  so  IT  ex¬ 
ecutives  can  ensure  that  their  servers  are  secure. 

But  again,  the  process  ran  into 
snags. The  Security  Tool  Kit  CD  dis¬ 
tributed  as  part  of  the  program 
changed  configurations  of  some 


users’  IIS  systems  and  reopened  vulnerabilities. 

“It  runs  perfectly  on  a  default  install  of  IIS,  but  who 
has  a  default  install?”TruSecure’s  Cooper  asks. 

Microsoft  has  a  major  chance  next  year  to  con¬ 
vince  IT  executives  security  is  of  paramount  con¬ 
cern  when  the  company  ships  Windows.Net  Server. 
The  server  will  include  patch  and  security  manage 
ment  features.  Also,  IIS  will  not  install  by  default  and 
will  only  install  after  an  administrator  has  walked 
through  a  series  of  questions  about  setup  and  in¬ 
tended  use. 

But  most  important,  the  server  is  the  first  product 
developed  under  Microsoft’s  Secure  Windows  Init- 
iative.The  initiative  was  launched  early  last  year  and 
is  designed  to  make  security  a  focal  point  for  all  its 
internal  product  development. 

“We  have  seen  Microsoft  spend  a  lot  of  money  on 
educating  its  developers  on  preventing  bugs  in 
code,”  says  John  Bescatore,  an  analyst  with  Gartner. 
“Our  projection  is  that  if  Microsoft  sticks  to  its  Secure 
Windows  Initiative  that  by  2005  the  server  [operating 
system]  will  be  more  secure  and  have  less  bugs  than 
the  industry  average  as  defined  by  Solaris,  AIX  and 
HP-UX.”  However,  Bescatore  says,  the  two  major  stum¬ 
bling  blocks  will  be  if  Microsoft  switches  its  tough 
security  stance  or  if  it  fails  to  change  the  develop¬ 
ment  culture  within  its  ranks. 

Culp  says  Microsoft  will  not  waver 
on  security  “Security  is  key  for  .Net 
and  key  for  the  industry  in  general,” 
he  says.  ■ 
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Mark  Gibbs 


A  bag  without  a  cat 


“Code  Red.  Lion.  Sadmind.  Ramen. 
Nimda.  In  the  past  year,  computer 
worms  with  these  names  have  at¬ 
tacked  computer  networks  around 
the  world,  causing  billions  of  dollars 
of  damage. . . .  The  people  who  wrote 
them  have  been  lightly  condemned  as  criminals.  But 
they  needed  help  to  devastate  our  networks.  And  we 
in  the  security  community  gave  it  to  them.  ...It's  time 
the  security  community  stopped  providing  blueprints 
for  building  these  weapons  ...We  can  and  should  dis¬ 
cuss  security  vulnerabilities,  but  we  should  be  smart, 
prudent  and  responsible  in  the  way  we  do  it.’’ 

—  From  “It’s  Time  to  End  Information  Anarchy"  by 
Scott  Culp  of  Microsoft 

The  above  extract  is  from  a  story  posted  on 
Microsoft’s  TechNet  (go  to  www.nwfusion.com, 
DocFinder:6876  for  the  full  rant). The  point  that 
Culp,  who  is  manager  of  the  Microsoft  Security  Re¬ 
sponse  Center,  is  apparently  trying  to  make  is  that 
the  computer  industry  needs  to  be  more  circum¬ 
spect  about  how  and  when  it  discusses  the  vulner¬ 
abilities  of  various  operating  systems. 

Culp  argues  that  “much  of  the  security  community 
handles  [security  vulnerabilities]  in  a  way  that  fairly 
guarantees  their  use,  by  following  a  practice  that’s 
best  described  as  information  anarchy  This  is  the 


practice  of  publishing  explicit,  step-by-step  instruc¬ 
tions  for  exploiting  security  vulnerabilities,  without 
regard  for  how  the  information  may  be  used.” 

Culp  argues  that  some  malicious  code  is  so  obvi¬ 
ously  based  on  the  published  analysis  of  worms  that 
it  is  “simply  indefensible  for  the  security  community 
to  continue  arming  cybercriminals.” 

Culp’s  solution  is  a  vague  proposal  that  security 
professionals  should  handle  information  about 
threats  “responsibly’ Considering  how  many  security 
problems  have  been  generated  by  Microsoft  operat¬ 
ing  systems,  a  cynical  mind  might  conclude  that 
Culp  —  and  Microsoft  by  extension  —  would  prefer 
that  if  you  find  anything  amiss  you  keep  it  to  your¬ 
self.  In  other  words,  after  you’ve  told  the  owner  of  the 
software  (such  as  Microsoft)  you  should  leave  them 
to  generate  a  fix  without  getting  a  lot  of  IT  people 
worried  and  bent  out  of  shape  over  the  issue. 

While,  at  first  blush,  this  may  sound  reasonable,  it 
does  suppose  that  the  company  addresses  the  prob¬ 
lem  thoroughly  and  in  a  timely  manner. 

This  is,  of  course,  wildly  optimistic. 

The  problem  is  that  whenever  a  fault  is  found  with 
something  and  someone  with  a  vested  interest  in 
that  something  is  involved  in  the  dissemination  of 
information  about  the  problem,  there  will  be  a  pow¬ 
erful  tendency  to  maintain  those  interests  and  mini¬ 
mize  potentially  negative  consequences.  In  short, 


when  things  go  wrong,  people  and  organizations 
tend  to  act  so  as  to  minimize  damage. 

Microsoft’s  past  responses  to  serious  security  sna¬ 
fus  show  that  when  these  problems  arise  there’s  no 
guarantee  the  company  will  behave  responsibly  and 
in  the  best  interests  of  end  users. 

Culp’s  thinking  is  a  wonderful  example  of  Micro¬ 
soft’s  alarming  and  pernicious  tendency  toward  a 
heady  mix  of  fascism  and  totalitarianism:“We  know 
best.  We’ll  handle  this,  and  don’t  you  worry  your 
pretty  little  heads  over  it  until  we  tell  you  to.” 

Unfortunately,  when  it  comes  to  problems  that 
affect  millions  of  people  and  thousands  of  busi¬ 
nesses,  there  is  no  substitute  for  knowledge,  even 
if  Microsoft  chooses  not  to  act  on  it.  And  the  idea 
that  some  group  of  self-appointed  and  self-inter¬ 
ested  experts  should  control  the  flow  of  informa¬ 
tion  is  laughable.  Particularly  if  the  world’s  largest 
software  vendor  is  at  the  helm. 

Culp,  information  of  any  kind  on  the  ’Net  is  anar¬ 
chic,  and  the  more  we  talk  about  our  problems  the 
stronger  we  are.  Conversely,  the  more  secretive  we 
are,  the  weaker  our  responses  become.  By  all  means 
let  us  avoid  sensationalizing  these  problems,  but  the 
cat  got  of  the  bag  years  ago.  And  it  will  never  get 
back  in.  Ever. 

Escape  stories  to  nwcolumn@gibbs.com. 


uzz  The  Latest  on  the  Internet  Industry 


Gryphon  Networks  CEO  Keith  Fotta  sees  dollar 
signs  dancing  in  his  dreams  every  time  another 
state  legislature  passes  a  "do  not  call"  law  aimed  at 
telemarketers. 

That  dance  floor  has  gotten  mighty  crowded  of 
late. 

Three  years  ago,  only  two  states  —  Florida  and 
Georgia —  had  laws  letting  residents  place  their 
names  on  a  “do  not  call"  list  that  telemarketers 
nationwide  are  obligated  to  honor  or  face  fines  of 
thousands  of  dollars  per  contact.  That  number  has  now  swollen  to  26  states,  with 
California  added  just  last  month.  And  each  of  the  24  holdouts  has  similar  legisla¬ 
tion  pending. 

Gryphon  provides  a  service  that  automatically  compares  telephone  numbers 
dialed  by  its  customers'  employees  against  state  “do  not  call”  lists.  If  a  number  is 
on  a  list,  the  call  is  blocked,  and  the  salesperson  attempting  to  make  it  hears  a 
recording  that  explains  why.  The  service  also  helps  companies  comply  with  their 
own  "do  not  call"  lists,  which  federal  law  requires  them  to  update  every  time  a 
consumer  asks  that  they  not  be  contacted.  The  Massachusetts  company  has 
about  100  customers,  including  large  banks,  brokerages  and  insurance  firms, 
some  with  more  than  500  offices  connected  to  its  network. 

"Our  service  is  totally  network-delivered  and  allows  all  of  these  firms  to 
instantly  and  automatically  comply,"  Fotta  says.  “They  don’t  buy  any  equipment 
of  any  kind." 

They  also  don't  buy  Fotta's  service  for  any  particular  state  until  one  critical 
threshold  has  been  crossed:  That  state  has  to  actually  start  enforcing  its  "do  not 
call"  law.  Only  seven  do  so  today,  Fotta  says,  although  he  expects  the  19  others 
with  newly  enacted  laws  to  begin  dropping  the  hammer  on  violators  next  year. 

Unlike  the  federal  government,  the  states  are  very,  very  aggressive  about 
enforcing  their  laws,”  Fotta  says.  "Missouri  has  collected  $430,000  so  far,  and 
their  law  only  went  into  effect  on  July  1.  New  York  just  announced  a  $225,000  fine 


against  one  company.” 

Fines  of  that  magnitude  tend  to  motivate  business  executives  who  might  other¬ 
wise  take  their  chances  on  not  getting  caught. 

"It’s  not  a  perfect  world.  Everybody  doesn't  sign  up  [with  Gryphon]  on  day  one" 
after  enforcement  begins,  Fotta  says.  “But  certainly  the  leaders  are  the  big 
household-name  companies  that  have  brand  equity  to  protect." 

Fotta  says  Gryphon  stands  ready  to  launch  a  similar  service  to  combat  un¬ 
wanted  e-mail.  All  he  needs  to  launch,  he  says,  is  a  critical  mass  of  antispam 
laws  with  teeth  .  .  .  and  law  enforcement  officers  willing  to  bite. 

Not-so-Valiant  Networks 

Just  when  you're  certain  you’ve  heard  the  slimiest  of  the  high-tech  layoff  horror 
stories,  along  comes  an  ironically  named  Valiant  Networks  to  set  a  new  standard. 

A  consultant  to  telecom  and  network  companies,  Valiant  has  had  to  slash  its 
workforce  from  about  120  to  29  in  response  to  the  market  conditions.  Nothing 
unusual  and  no  shame  there. 

However,  what  is  shameful  is  Valiant's  insistence  that  laid-off  workers  who 
received  signing  bonuses  contingent  on  their  serving  one  year  with  the  company 
—  now  impossible  —  repay  a  prorated  portion  of  what  they  got  or  face  the  wrath 
of  collection  agencies.  Oh,  and  these  jobless  men  and  women  being  asked  to 
return  their  bonuses  received  zip  from  Valiant  for  severance  pay. 

Valiant's  top  bean  counter  told  the  San  Jose  Mercury  News  his  company  is 
doing  nothing  more  or  less  than  enforcing  the  terms  of  deals  these  employees 
willingly  signed.  The  employment  letters  apparently  called  for  return  of  the  bonus 
money  if  employment  was  “severed,"  irrespective  of  the  reason. 

Reminds  me  of  that  old  joke  about  the  guy  who  kills  his  parents  and  then  pleads 
for  mercy  on  grounds  that  he's  an  orphan. 

Someone  needs  to  tell  the  remaining  executives  at  Valiant  that  there's  a  world  of 
difference  between  hard-nosed  and  heartless. 

Have  a  horror  story  to  share?  The  address  is  buzz@nww.com. 
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THIS  IS  THE  START  OF 
SOMETHING  BIG 


THE  AMAZINGLY  SCALABLE  IBM  NAS. 

SEE  FOR  YOURSELF  -  WITH  NO  PAYMENTS  FOR  90  DAYS. 


Massively  scalable  data  storage  that  fits  into  just  about  any  LAN  - 
last.  That’s  the  power  and  flexibility  of  the  IBM  Network  Attached 
Storage  (NAS)  family  of  products.  See  for  yourself.  Finance  and 
install  an  IBM  NAS  product  before  December  31,  2001,  and 
you  don’t  have  to  make  a  payment  for  90  days.*  You  can  also 
take  advantage  of  our  low  financing  rates.  You’ll  see  IBM  NAS 
makes  file  sharing  easier  -  and  easier  to  manage.  It  scales  as  your 
data  needs  grow.  It  offers  integrated,  multi-protocol  support.  And 
it’s  quick  to  install,  with  little  or  no  downtime.  Start  something  big 
today.  For  more  details,  or  to  ask  about  a  demonstration  at  an 
IBM  TotalStorage  Solution  Center,  call  1800  426-7777  and  ask  for 
Priority  Code  101EY002  or  visit  ibm.com/totalstorage/nasl8.  And 
remember  to  ask  for  your  complimentary  IBM  NAS  Information  Pack. 


IBM  TotalStorage™  NAS  Family 

•  Powered  by  an  optimized  Windows  operating  system 

•  250  Persistent  True  Image™  data  views,  enabling  client 
file  restorations,  non-disruptive  backups,  and  elimination 
of  backup  windows 

•  Integrated  with  leading  systems  management  tools 

•  Redundant  components  for  system  availability 

•  Multiple  RAID  levels  for  additional  on-disk  data  protection 

•  Multi-platform  file  sharing  in  mixed  operating  system 
environments 

Install  IBM  NAS  before  December  31,2001 
and  don’t  make  a  payment  for  90  days. 


(go  ibm.com/totalstorage/nas18  Q  1  800  426-7777  Priority  Code  101EY002 
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Making  your  network  perform  shouldn’t  be  such  a  workout.  Extreme  Networks  delivers  a  simplified  approach  for 


building  networks  that  optimizes  application  performance  —  so  business  critical  information  gets  where  it  needs 
to  go  —  Fast!  For  more  information,  visit  our  website  or  give  us  a  call.  And  unclog  your  network  once  and  for  all. 


www.extremenetworks.com/go/nw.htm  |  1-888-257-3000,  ext.  3131  (U.S.)  j  +1 408-579-3131  (Outside  U.S.) 
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